Code:
======================================== 13.05.2016 ========================================
По указанному фильтру отчетов на эту дату не найдено.
======================================== 14.05.2016 ========================================
По указанному фильтру отчетов на эту дату не найдено.
======================================== 15.05.2016 ========================================
========================================
Bot ID: MD_8830_7875768FE856ABD9
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1031
Локальное время:15.05.2016 16:24:33
GMT: +2:00
Время сессии: 06:37:31
Время отчета: 15.05.2016 14:23:57
Страна: DE
IPv4: 84.134.179.186
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.settings/setuserdatavalues
Тип: HTTPS запрос
Размер (байты): 3 699
----------------------------------------
https://email.t-online.de/em/srv/service.settings/setuserdatavalues
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=432; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:27$_ss:1$_st:1463300533262$_pn:1%3B exp-session$ses_id:1463298733262%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=50vs32fu9jddigqpjaw0wagzwjrbkxrb.08; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
values%5Blisa.global.lastlogin.timestamp%5D=146332 2273
========================================
Локальное время:15.05.2016 16:24:33
Время сессии: 06:37:32
Время отчета: 15.05.2016 14:23:57
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 3 969
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=432; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:27$_ss:1$_st:1463300533262$_pn:1%3B exp-session$ses_id:1463298733262%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=50vs32fu9jddigqpjaw0wagzwjrbkxrb.08; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
messageXguidList%5BINBOX%5D%5B121558993911410%5D=1 21558993911410
messageXguidList%5BINBOX%5D%5B121558993911310%5D=1 21558993911310
messageXguidList%5BINBOX%5D%5B121558993911210%5D=1 21558993911210
messageXguidList%5BINBOX%5D%5B121558993911110%5D=1 21558993911110
messageXguidList%5BINBOX%5D%5B121558993911010%5D=1 21558993911010
========================================
Локальное время:15.05.2016 16:25:33
Время сессии: 06:38:32
Время отчета: 15.05.2016 14:26:58
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 3 822
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=432; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:28$_ss:1$_st:1463324075752$_pn:1%3B exp-session$ses_id:1463322275752%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=50vs32fu9jddigqpjaw0wagzwjrbkxrb.08; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463408676522
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
lastReceivedMail%5Buid%5D=121558993911410
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d23f48afbd949e 683192b69332bf8100
========================================
Локальное время:15.05.2016 17:12:52
Время сессии: 07:25:51
Время отчета: 15.05.2016 15:12:12
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.settings/setuserdatavalues
Тип: HTTPS запрос
Размер (байты): 3 726
----------------------------------------
https://email.t-online.de/em/srv/service.settings/setuserdatavalues
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=4111; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:28$_ss:1$_st:1463324075752$_pn:1%3B exp-session$ses_id:1463322275752%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463408676522; lisid=7nx2wfz0q55pbg7thsbx5jv25i8cf3zp.10; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
values%5Blisa.global.lastlogin.timestamp%5D=146332 5172
========================================
Локальное время:15.05.2016 17:12:52
Время сессии: 07:25:51
Время отчета: 15.05.2016 15:12:12
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 3 996
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=4111; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:28$_ss:1$_st:1463324075752$_pn:1%3B exp-session$ses_id:1463322275752%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463408676522; lisid=7nx2wfz0q55pbg7thsbx5jv25i8cf3zp.10; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
messageXguidList%5BINBOX%5D%5B121558993911410%5D=1 21558993911410
messageXguidList%5BINBOX%5D%5B121558993911310%5D=1 21558993911310
messageXguidList%5BINBOX%5D%5B121558993911210%5D=1 21558993911210
messageXguidList%5BINBOX%5D%5B121558993911110%5D=1 21558993911110
messageXguidList%5BINBOX%5D%5B121558993911010%5D=1 21558993911010
========================================
Локальное время:15.05.2016 17:13:04
Время сессии: 07:26:03
Время отчета: 15.05.2016 15:12:12
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfolders
Тип: HTTPS запрос
Размер (байты): 3 690
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfolders
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=4111; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:29$_ss:1$_st:1463326973845$_pn:1%3B exp-session$ses_id:1463325173845%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463408676522; lisid=7nx2wfz0q55pbg7thsbx5jv25i8cf3zp.10; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
simplifyAlpsStructure=true
========================================
Локальное время:15.05.2016 17:13:05
Время сессии: 07:26:03
Время отчета: 15.05.2016 15:12:13
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 001
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=4111; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:29$_ss:1$_st:1463326973845$_pn:1%3B exp-session$ses_id:1463325173845%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463408676522; lisid=7nx2wfz0q55pbg7thsbx5jv25i8cf3zp.10; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
messageXguidList%5BINBOX.Sent%5D%5B1215589940910%5 D=1215589940910
messageXguidList%5BINBOX.Sent%5D%5B1215589940810%5 D=1215589940810
messageXguidList%5BINBOX.Sent%5D%5B1215589940710%5 D=1215589940710
messageXguidList%5BINBOX.Sent%5D%5B1215589940610%5 D=1215589940610
messageXguidList%5BINBOX.Sent%5D%5B1215589940510%5 D=1215589940510
========================================
Локальное время:15.05.2016 17:13:53
Время сессии: 07:26:51
Время отчета: 15.05.2016 15:15:13
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 3 823
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=4111; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:29$_ss:1$_st:1463326973845$_pn:1%3B exp-session$ses_id:1463325173845%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463408676522; lisid=7nx2wfz0q55pbg7thsbx5jv25i8cf3zp.10; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
lastReceivedMail%5Buid%5D=121558993911410
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d23f48afbd949e 683192b69332bf8100
========================================
Локальное время:15.05.2016 17:14:25
Время сессии: 07:27:24
Время отчета: 15.05.2016 15:15:14
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://rover.ebay.com/ar/1/152819/4?mpt=1463325209&siteid=77&icep_siteid=77&ipn=adma in2&adtype=2&size=160x600&pgroup=432321&mpvc=https ://secure-ams.adnxs.com/click?cqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-YSzOAXKa05Kn5AhH9He3UZkjhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAA_coDAQQAAQ AAAAAAZCOIcgAAAAA./cnd=%21ugeKVAini5YGEJaqoxMYjM0KIAQoipqQYg../bn=51965/referrer=https%3A%2F%2Femail.t-online.de%2Fem/clickenc=
Тип: HTTPS запрос
Размер (байты): 1 908
----------------------------------------
https://rover.ebay.com/ar/1/152819/4?mpt=1463325209&siteid=77&icep_siteid=77&ipn=adma in2&adtype=2&size=160x600&pgroup=432321&mpvc=https ://secure-ams.adnxs.com/click?cqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-YSzOAXKa05Kn5AhH9He3UZkjhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAA_coDAQQAAQ AAAAAAZCOIcgAAAAA./cnd=%21ugeKVAini5YGEJaqoxMYjM0KIAQoipqQYg../bn=51965/referrer=https%3A%2F%2Femail.t-online.de%2Fem/clickenc=
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D870503335360639058591963ff^cguid/57eaba7c1540a602ef17d177fed30f66591963ff^tguid/57eaba7c1540a602ef17d177fed30f67591963ff^; dp1=bu1p/QEBfX0BAX19AQA**59196408^bl/DE5afa9788^; nonsession=CgADLAAFXODeQMQDKACBgnjIINTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNjc8+gPL
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://secure-fra.adnxs.com/if?e=wqT_3QL7BPBEewIAAAMA1gAFAQiZpOK5BRDmpbCG_qLK1 jkYqvyBovjv0b11IAEqLQlypzhxS7bFPxFypzhxS7bFPxkUrkf hehQQQCFyDRIAKREk8Icw7s5AONsKQNsKSAJQlqqjE1iMzQpgA GjovAF4_ZUDgAEBigEDVVNEkgEDRVVSmAGgAaAB2ASoAQCwAQC 4AQLAAQTIAQDQAQDYAQDgAQDwAQD6AQczODY4NDE2igI5dWYoJ 2EnLCA3NDcxNiwgMTQ2MzMyNTIwOSk7dWYoJ3InLCA0MDQyNDc yOh4A8LSSAskBITZDdi0zQWluaTVZR0VKYXFveE1ZQUNDTXpRb 3dBRGdBUUFSSTJ3cFE3czVBV0FCZ0FtZ0FjQXA0d0FhQUFYYUl BY0FHa0FFQm1BRUJvQUVCcUFFRHNBRUF1UUV6TXpNek16UERQO EVCY3FjNGNVdTJ4VF9KQVZMeVRvc2pnT3dfMlFFalNudURMMHp zUC1BQkFQVUJBQUFBQUpnQ2lwcVFZcUFDQUxVQ0FBQUFBTDBDA RtwQU9BQ0FPZ0NBUGdDQUlBREFRLi6aAiUhdWdlS1Y6zADwqWp NMEtJQVFvaXBxUVlnLi7YAvAC4AKx6i_qAhxodHRwczovL2VtY WlsLnQtb25saW5lLmRlL2VtgAMBiAMBkAMAmAMAoAMAqgMAsAM AuAMAwAOsAsgDANgDk6Ik4AMA6AMA-AMBgAQAkgQEL3R0apgEAKIEDjg0LjEzNC4xNzkuMTg2qAT_0gG yBAgIABAAGAAgALgEAMAEAMgEANIECzEwLjEzLjY4LjEy&ab90 9ca8&referrer=https%3A%2F%2Femail.t-online.de%2Fem
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:14:28
Время сессии: 07:27:26
Время отчета: 15.05.2016 15:15:14
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D29611%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030343924420&mpt=&m pcr=96807835&imp_rvr_id=1030343924420&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-YSzOAXKa05Kn5AhH9He3UZkjhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAA_coDAQQAAQ AAAAAAZCOIcgAAAAA.%2Fcnd%3D!ugeKVAini5YGEJaqoxMYjM 0KIAQoipqQYg..%2Fbn%3D51965%2Freferrer%3Dhttps%3A% 2F%2Femail.t-online.de%2Fem%2Fclickenc%3D
Тип: HTTPS запрос
Размер (байты): 1 547
----------------------------------------
https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D29611%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030343924420&mpt=&m pcr=96807835&imp_rvr_id=1030343924420&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-YSzOAXKa05Kn5AhH9He3UZkjhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAA_coDAQQAAQ AAAAAAZCOIcgAAAAA.%2Fcnd%3D!ugeKVAini5YGEJaqoxMYjM 0KIAQoipqQYg..%2Fbn%3D51965%2Freferrer%3Dhttps%3A% 2F%2Femail.t-online.de%2Fem%2Fclickenc%3D
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: svid=878803336794385787; rts=1462483203616; mojo3=19766:40720/25517:2887
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://rover.ebay.com/ar/1/152819/4?mpt=1463325209&siteid=77&icep_siteid=77&ipn=adma in2&adtype=2&size=160x600&pgroup=432321&mpvc=https ://secure-ams.adnxs.com/click?cqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-YSzOAXKa05Kn5AhH9He3UZkjhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAA_coDAQQAAQ AAAAAAZCOIcgAAAAA./cnd=%21ugeKVAini5YGEJaqoxMYjM0KIAQoipqQYg../bn=51965/referrer=https%3A%2F%2Femail.t-online.de%2Fem/clickenc=
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:14:30
Время сессии: 07:27:29
Время отчета: 15.05.2016 15:15:15
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://reco.ebay.com/service/plmt/100299?plmt=100299&itm=291581593209&si=77&usrSi=DE &locale=de-DE&fmt=json&callback=handleServerResponse
Тип: HTTPS запрос
Размер (байты): 1 440
----------------------------------------
https://reco.ebay.com/service/plmt/100299?plmt=100299&itm=291581593209&si=77&usrSi=DE &locale=de-DE&fmt=json&callback=handleServerResponse
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D8705033353606390585919c59b^tguid/57eaba7c1540a602ef17d177fed30f675919c59b^cguid/57eaba7c1540a602ef17d177fed30f665919c59b^; dp1=bu1p/QEBfX0BAX19AQA**59196408^bl/DE5afa9788^; nonsession=CgADLAAFXODeQMQDKACBgnjIINTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNjc8+gPL
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D29611%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030343924420&mpt=&m pcr=96807835&imp_rvr_id=1030343924420&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-YSzOAXKa05Kn5AhH9He3UZkjhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAA_coDAQQAAQ AAAAAAZCOIcgAAAAA.%2Fcnd%3D!ugeKVAini5YGEJaqoxMYjM 0KIAQoipqQYg..%2Fbn%3D51965%2Freferrer%3Dhttps%3A% 2F%2Femail.t-online.de%2Fem%2Fclickenc%3D
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:14:32
Время сессии: 07:27:31
Время отчета: 15.05.2016 15:15:15
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://image.edpn.ebay.com/tools/dap/resize.php?img=http://i.ebayimg.com/images/m/mmOo1mD_nPRW2FC7C7XPkDw/s-b140x140/p.jpg&size=150
Тип: HTTPS запрос
Размер (байты): 1 522
----------------------------------------
https://image.edpn.ebay.com/tools/dap/resize.php?img=http://i.ebayimg.com/images/m/mmOo1mD_nPRW2FC7C7XPkDw/s-b140x140/p.jpg&size=150
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D8705033353606390585919c59b^tguid/57eaba7c1540a602ef17d177fed30f675919c59b^cguid/57eaba7c1540a602ef17d177fed30f665919c59b^; dp1=bu1p/QEBfX0BAX19AQA**5919c5a0^bl/DE5afaf920^; nonsession=CgADLAAFXOJkoMQDKACBgnpOgNTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNje/glGk; ebay=%5Esbf%3D%23%5E; s=CgAD4ACBXOeOgYjRmYWNmMmIxNTQwYTYyMjgyZjE4NmY3ZmZ lODllYzU+AIyV
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D29611%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030343924420&mpt=&m pcr=96807835&imp_rvr_id=1030343924420&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-YSzOAXKa05Kn5AhH9He3UZkjhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAA_coDAQQAAQ AAAAAAZCOIcgAAAAA.%2Fcnd%3D!ugeKVAini5YGEJaqoxMYjM 0KIAQoipqQYg..%2Fbn%3D51965%2Freferrer%3Dhttps%3A% 2F%2Femail.t-online.de%2Fem%2Fclickenc%3D
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:20:27
Время сессии: 07:33:25
Время отчета: 15.05.2016 15:21:20
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://bs.serving-sys.com/BurstingPipe/adServer.bs?cn=rsb&c=28&pli=17566398&PluID=0&w=160 &h=600&ord=7591689609614190708&ucm=true&cs=1&ncu=$ $http://pr.ybp.yahoo.com/cj/cd/yFyUvRdfh9OhDuzaPVmVyRxnWLXB9Q6VTsKHOW79in6_9bvM2F jDb8Zud6Gfmodydj4fWLQQ_2AKrPA40VtX00poT-mWeO6qdQsfzjpE2gqpnBxufWrPcSnuHVlFwo7sdxKhhnp7Vng/rurl/https://bs.serving-sys.com/BurstingPipe/adServer.bs?cn=rdp&jumpurl=$$
Тип: HTTPS запрос
Размер (байты): 1 617
----------------------------------------
https://bs.serving-sys.com/BurstingPipe/adServer.bs?cn=rsb&c=28&pli=17566398&PluID=0&w=160 &h=600&ord=7591689609614190708&ucm=true&cs=1&ncu=$ $http://pr.ybp.yahoo.com/cj/cd/yFyUvRdfh9OhDuzaPVmVyRxnWLXB9Q6VTsKHOW79in6_9bvM2F jDb8Zud6Gfmodydj4fWLQQ_2AKrPA40VtX00poT-mWeO6qdQsfzjpE2gqpnBxufWrPcSnuHVlFwo7sdxKhhnp7Vng/rurl/https://bs.serving-sys.com/BurstingPipe/adServer.bs?cn=rdp&jumpurl=$$
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: S_250573248=5791320633364556058; S_5259369=4227587954184139538; S_17390212=2467764935927989995; S_17649207=3510975980450726397; S_17203665=6148784920037413900; S_17273494=5789870689399875699; S_17568215=6254154652390919544; A6=027WVNkJAM000sqJ000020000028tpNkOcE0004a1000020 0000215tbkO8a000jf2000010000027WVHkJA5000sqJ000010 0000281AIkM6X0004a1000010000028tPDkOcE000sqJ000020 000026lCgkML0000xno00001000000Ej4WkPrb000i66000000 000025k+SkPs.000srd000000000028vn1kOcp000wy500002k Ocp01YtLIkJet000sup000000000025RgUkPs.000srd000000 000029ss7kPy3000sqJ000010000027XxMkPs+000rRt000000 000024lOKkKhG000j3L000010000027AN6kPsZ000rRq000010 000026YCOkMLA0004Tm000010000027uX9kIY6000kin000000 0000281IjkM35000sqJ000000000026lCfkML4000xno000010 000028Z8ykOck0004Tm0000100000282GUkM6X000sqJ000000 000; u2=cf950afc-b2e7-4236-883d-392dadb9f11748E00g; C5=; D2=; eyeblaster=FLV=21&RES=4
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://dlvr.t-online.de/static/lisa/placement/v1/basic.html?placementType=sky&placementId=62868445& rotationDisablingActivated=1
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:28:34
Время сессии: 07:41:33
Время отчета: 15.05.2016 15:30:33
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://datahub.serving-sys.com/samurai/collect/events
Тип: HTTPS запрос
Размер (байты): 1 640
----------------------------------------
https://datahub.serving-sys.com/samurai/collect/events
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: -
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://secure-ams.adnxs.com/if?e=wqT_3QKjBvBEIwMAAAMA1gAFAQjjquK5BRDh-Yzm442CqGAYqvyBovjv0b11IAEqLQkUdSVyr9jFPxES-w1ARRnEPxkUrkfhehQQQCESDRIIKRN1CSTwijDuzkA42wpA5hB IAlCVhO4VWIzNCmAAaOi8AXjL7gOAAQGKAQNVU0SSAQNFVVKYA aABoAHYBKgBALABALgBAsABBcgBANABANgBAOABAPABAPoBBzM 4Njg0MTaKApEBdWYoJ2EnLCAzNjE4MDAsIDE0NjMzMjYwNTEpO 3VmKCdyJywgNDU4NDI5NjVGHgAsYycsIDEyNDIyMjM5Rh4AEGc nLCAyAQEENTFGHQAAaQF1EDI0MTM4NhwA8PiSApUCIUpVaFJIZ 2pmbVBZRkVKV0U3aFVZQUNDTXpRb3dBamdBUUFCSTVoQlE3czV BV0FCZ0FtZ0FjQUo0R0lBQkJvZ0JHSkFCQVpnQkFhQUJDcWdCQ TdBQkFMa0J5TWlVbEp4Und6X0JBUk4xSlhLdjJNVV95UUg4ZTM 1anZDTDJQOWtCSTBwN2d5OU03RF9nQWFya0VfVUJ5UElVUG9BQ 0FJZ0NqWXAxaUFLT2luV0lBby1LZFlnQ2tJcDFpQUtSaW5XSUF xUE5lb2dDNWJpTkFZZ0N4dXV0QVpBQ0NKZ0Npb1RRdWd5Z0FnQ 29BZ2kxQWdBQUFBQzkJCJBEUUFnTFlBaGpnQWdEb0FnRDRBZ0N BQXdFLpoCJSFEZ25nYXdqMhgBHGpNMEtJQUFvCVjwnncu2ALwA uACseov6gIcaHR0cHM6Ly9lbWFpbC50LW9ubGluZS5kZS9lbYA DAYgDAZADAJgDAKADAKoDALADALgDAMADrALIAwDYA5OiJOADA OgDAPgDAYAEAJIEBC90dGqYBACiBA44NC4xMzQuMTc5LjE4Nqg EjdMBsgQICAAQABgAIAC4BADABJX-wQ7IBADSBAsxMC4yLjg0LjE5OQ..&d4be4b6b&referrer=htt ps%3A%2F%2Femail.t-online.de%2Fem
User input: t-online.de login
POST data:
{"sid":"4136859395081131591","adid":36030215,"time":1463326107012,"frmt":5,"dur":5,"os":4,"brsrc":21,"brsrv":46,"brsrt":2,"env":0,"url":"https://secure-ams.adnxs.com/if?e=wqT_3QKjBvBEIwMA","srvmd":2,"vsr":1,"vsbp":6,"vsri":1,"uvsiab":1}
========================================
Локальное время:15.05.2016 17:29:02
Время сессии: 07:42:00
Время отчета: 15.05.2016 15:30:34
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 771
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=4111; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:29$_ss:1$_st:1463326973845$_pn:1%3B exp-session$ses_id:1463325173845%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463408676522; lisid=7nx2wfz0q55pbg7thsbx5jv25i8cf3zp.10; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
messageId=1215589940910
folderId=INBOX.Sent
nextMsgId=1215589940810
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:15.05.2016 17:29:03
Время сессии: 07:42:01
Время отчета: 15.05.2016 15:30:34
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 714
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=4111; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:29$_ss:1$_st:1463326973845$_pn:1%3B exp-session$ses_id:1463325173845%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463408676522; lisid=7nx2wfz0q55pbg7thsbx5jv25i8cf3zp.10; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
email=regina.uibel%40t-online.de
========================================
Локальное время:15.05.2016 17:31:27
Время сессии: 07:44:26
Время отчета: 15.05.2016 15:33:35
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://rover.ebay.com/ar/1/152819/4?mpt=1463326232&siteid=77&icep_siteid=77&ipn=adma in2&adtype=2&size=160x600&pgroup=432321&mpvc=https ://secure-ams.adnxs.com/click?cqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP_bIWGPPENoBKn5AhH9He3UY ljhXAAAAAG4nEABbBQAAWwUAAAIAAAAW1WgCjKYCAAAAAQBVU0 QARVVSAKAAWAJoXgAAfP0DAQQAAQAAAAAAgiPpkAAAAAA./cnd=%21xAewVAini5YGEJaqoxMYjM0KIAQoioTYOg../bn=64892/referrer=https%3A%2F%2Femail.t-online.de%2Fem/clickenc=
Тип: HTTPS запрос
Размер (байты): 1 983
----------------------------------------
https://rover.ebay.com/ar/1/152819/4?mpt=1463326232&siteid=77&icep_siteid=77&ipn=adma in2&adtype=2&size=160x600&pgroup=432321&mpvc=https ://secure-ams.adnxs.com/click?cqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP_bIWGPPENoBKn5AhH9He3UY ljhXAAAAAG4nEABbBQAAWwUAAAIAAAAW1WgCjKYCAAAAAQBVU0 QARVVSAKAAWAJoXgAAfP0DAQQAAQAAAAAAgiPpkAAAAAA./cnd=%21xAewVAini5YGEJaqoxMYjM0KIAQoioTYOg../bn=64892/referrer=https%3A%2F%2Femail.t-online.de%2Fem/clickenc=
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D8705033353606390585919c59b^tguid/57eaba7c1540a602ef17d177fed30f675919c59b^cguid/57eaba7c1540a602ef17d177fed30f665919c59b^; dp1=bu1p/QEBfX0BAX19AQA**5919c5a0^bl/DE5afaf920^; nonsession=CgADLAAFXOJkoMQDKACBgnpOgNTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNje/glGk; ebay=%5Esbf%3D%23%5E; s=CgAD4ACBXOeOgYjRmYWNmMmIxNTQwYTYyMjgyZjE4NmY3ZmZ lODllYzU+AIyV
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://secure-ams.adnxs.com/if?e=wqT_3QL1BPBEdQIAAAMA1gAFAQiYrOK5BRD2keOa9pmE7 QEYqvyBovjv0b11IAEqLQlypzhxS7bFPxFypzhxS7bFPxkUrkf hehQQQCFyDRIAKREk8Icw7s5AONsKQNsKSAJQlqqjE1iMzQpgA GjovAF4_PoDgAEBigEDVVNEkgEDRVVSmAGgAaAB2ASoAQCwAQC 4AQLAAQTIAQDQAQDYAQDgAQDwAQD6AQczODY4NDE2igI5dWYoJ 2EnLCA3NDcxNiwgMTQ2MzMyNjIzMik7dWYoJ3InLCA0MDQyNDc yOh4A8F6SAsUBIVJ5dVZaQWluaTVZR0VKYXFveE1ZQUNDTXpRb 3dBRGdBUUFSSTJ3cFE3czVBV0FCZ0FtZ0FjQXg0SW9BQmVJZ0J JcEFCQVpnQkFhQUJBYWdCQTdBQkFMa0JNegkC8EZ3el9CQVhLb k9IRkx0c1VfeVFHbHBTbWVkdFByUDlrQkkwcDdneTlNN0RfZ0F RRDFBUUFBQUFDWUFvcUUyRHFnQWdDMUFnQQEUBDlBBQhoRGdBZ 0RvQWdENEFnQ0FBd0UumgIlIXhBZXdWOsgA8KdqTTBLSUFRb2l vVFlPZy4u2ALwAuACseov6gIcaHR0cHM6Ly9lbWFpbC50LW9ub GluZS5kZS9lbYADAYgDAZADAJgDAKADAKoDALADALgDAMADrAL IAwDYA5OiJOADAOgDAPgDAYAEAJIEBC90dGqYBACiBA44NC4xM zQuMTc5LjE4NqgEkNMBsgQICAAQABgAIAC4BADABADIBADSBAk xMC4yLjg2Ljc.&ec50277a&referrer=https%3A%2F%2Femai l.t-online.de%2Fem
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:31:29
Время сессии: 07:44:27
Время отчета: 15.05.2016 15:33:36
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D30633%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030342962523&mpt=&m pcr=96807835&imp_rvr_id=1030342962523&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP_bIWGPPENoBKn5AhH9He3UY ljhXAAAAAG4nEABbBQAAWwUAAAIAAAAW1WgCjKYCAAAAAQBVU0 QARVVSAKAAWAJoXgAAfP0DAQQAAQAAAAAAgiPpkAAAAAA.%2Fc nd%3D!xAewVAini5YGEJaqoxMYjM0KIAQoioTYOg..%2Fbn%3D 64892%2Freferrer%3Dhttps%3A%2F%2Femail.t-online.de%2Fem%2Fclickenc%3D
Тип: HTTPS запрос
Размер (байты): 1 547
----------------------------------------
https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D30633%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030342962523&mpt=&m pcr=96807835&imp_rvr_id=1030342962523&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP_bIWGPPENoBKn5AhH9He3UY ljhXAAAAAG4nEABbBQAAWwUAAAIAAAAW1WgCjKYCAAAAAQBVU0 QARVVSAKAAWAJoXgAAfP0DAQQAAQAAAAAAgiPpkAAAAAA.%2Fc nd%3D!xAewVAini5YGEJaqoxMYjM0KIAQoioTYOg..%2Fbn%3D 64892%2Freferrer%3Dhttps%3A%2F%2Femail.t-online.de%2Fem%2Fclickenc%3D
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: svid=878803336794385787; rts=1462483203616; mojo3=19766:40720/25517:2887
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://rover.ebay.com/ar/1/152819/4?mpt=1463326232&siteid=77&icep_siteid=77&ipn=adma in2&adtype=2&size=160x600&pgroup=432321&mpvc=https ://secure-ams.adnxs.com/click?cqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP_bIWGPPENoBKn5AhH9He3UY ljhXAAAAAG4nEABbBQAAWwUAAAIAAAAW1WgCjKYCAAAAAQBVU0 QARVVSAKAAWAJoXgAAfP0DAQQAAQAAAAAAgiPpkAAAAAA./cnd=%21xAewVAini5YGEJaqoxMYjM0KIAQoioTYOg../bn=64892/referrer=https%3A%2F%2Femail.t-online.de%2Fem/clickenc=
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:31:31
Время сессии: 07:44:30
Время отчета: 15.05.2016 15:33:36
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://reco.ebay.com/service/plmt/100299?plmt=100299&itm=322080015637&si=77&usrSi=DE &locale=de-DE&fmt=json&callback=handleServerResponse
Тип: HTTPS запрос
Размер (байты): 1 527
----------------------------------------
https://reco.ebay.com/service/plmt/100299?plmt=100299&itm=322080015637&si=77&usrSi=DE &locale=de-DE&fmt=json&callback=handleServerResponse
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D8705033353606390585919c999^cguid/57eaba7c1540a602ef17d177fed30f665919c999^tguid/57eaba7c1540a602ef17d177fed30f675919c999^; dp1=bu1p/QEBfX0BAX19AQA**5919c5a0^bl/DE5afaf920^; nonsession=CgADLAAFXOJkoMQDKACBgnpOgNTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNje/glGk; ebay=%5Esbf%3D%23%5E; s=CgAD4ACBXOeOgYjRmYWNmMmIxNTQwYTYyMjgyZjE4NmY3ZmZ lODllYzU+AIyV
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D30633%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030342962523&mpt=&m pcr=96807835&imp_rvr_id=1030342962523&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP_bIWGPPENoBKn5AhH9He3UY ljhXAAAAAG4nEABbBQAAWwUAAAIAAAAW1WgCjKYCAAAAAQBVU0 QARVVSAKAAWAJoXgAAfP0DAQQAAQAAAAAAgiPpkAAAAAA.%2Fc nd%3D!xAewVAini5YGEJaqoxMYjM0KIAQoioTYOg..%2Fbn%3D 64892%2Freferrer%3Dhttps%3A%2F%2Femail.t-online.de%2Fem%2Fclickenc%3D
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:31:33
Время сессии: 07:44:32
Время отчета: 15.05.2016 15:33:37
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://image.edpn.ebay.com/tools/dap/resize.php?img=http://i.ebayimg.com/images/m/m_pI-2z6e03cKLXF0pF_kqA/s-b140x140/p.jpg&size=150
Тип: HTTPS запрос
Размер (байты): 1 522
----------------------------------------
https://image.edpn.ebay.com/tools/dap/resize.php?img=http://i.ebayimg.com/images/m/m_pI-2z6e03cKLXF0pF_kqA/s-b140x140/p.jpg&size=150
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D8705033353606390585919c999^cguid/57eaba7c1540a602ef17d177fed30f665919c999^tguid/57eaba7c1540a602ef17d177fed30f675919c999^; dp1=bu1p/QEBfX0BAX19AQA**5919c99d^bl/DE5afafd1d^; nonsession=CgADLAAFXOJ0lMgDKACBgnpedNTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNjd42oYg; ebay=%5Esbf%3D%23%5E; s=CgAD4ACBXOeedYjRmYWNmMmIxNTQwYTYyMjgyZjE4NmY3ZmZ lODllYzWc+Jg8
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D30633%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030342962523&mpt=&m pcr=96807835&imp_rvr_id=1030342962523&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP_bIWGPPENoBKn5AhH9He3UY ljhXAAAAAG4nEABbBQAAWwUAAAIAAAAW1WgCjKYCAAAAAQBVU0 QARVVSAKAAWAJoXgAAfP0DAQQAAQAAAAAAgiPpkAAAAAA.%2Fc nd%3D!xAewVAini5YGEJaqoxMYjM0KIAQoioTYOg..%2Fbn%3D 64892%2Freferrer%3Dhttps%3A%2F%2Femail.t-online.de%2Fem%2Fclickenc%3D
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:32:26
Время сессии: 07:45:24
Время отчета: 15.05.2016 15:33:37
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://rover.ebay.com/ar/1/152819/4?mpt=1463326292&siteid=77&icep_siteid=77&ipn=adma in2&adtype=2&size=160x600&pgroup=432321&mpvc=https ://secure-ams.adnxs.com/click?cqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-xP8rc2dYAxKn5AhH9He3VUljhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAAL_QDAQQAAQ AAAAAAdSMSnwAAAAA./cnd=%21WAiCXQini5YGEJaqoxMYjM0KIAQoipqU-gI./bn=62511/referrer=https%3A%2F%2Femail.t-online.de%2Fem/clickenc=
Тип: HTTPS запрос
Размер (байты): 1 987
----------------------------------------
https://rover.ebay.com/ar/1/152819/4?mpt=1463326292&siteid=77&icep_siteid=77&ipn=adma in2&adtype=2&size=160x600&pgroup=432321&mpvc=https ://secure-ams.adnxs.com/click?cqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-xP8rc2dYAxKn5AhH9He3VUljhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAAL_QDAQQAAQ AAAAAAdSMSnwAAAAA./cnd=%21WAiCXQini5YGEJaqoxMYjM0KIAQoipqU-gI./bn=62511/referrer=https%3A%2F%2Femail.t-online.de%2Fem/clickenc=
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D8705033353606390585919c999^cguid/57eaba7c1540a602ef17d177fed30f665919c999^tguid/57eaba7c1540a602ef17d177fed30f675919c999^; dp1=bu1p/QEBfX0BAX19AQA**5919c99d^bl/DE5afafd1d^; nonsession=CgADLAAFXOJ0lMgDKACBgnpedNTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNjd42oYg; ebay=%5Esbf%3D%23%5E; s=CgAD4ACBXOeedYjRmYWNmMmIxNTQwYTYyMjgyZjE4NmY3ZmZ lODllYzWc+Jg8
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://secure-fra.adnxs.com/if?e=wqT_3QL3BPBEdwIAAAMA1gAFAQjUrOK5BRDsn8m_66adw DEYqvyBovjv0b11IAEqLQlypzhxS7bFPxFypzhxS7bFPxkUrkf hehQQQCFyDRIAKREk8Icw7s5AONsKQNsKSAJQlqqjE1iMzQpgA GjovAF4r-gDgAEBigEDVVNEkgEDRVVSmAGgAaAB2ASoAQCwAQC4AQLAAQTI AQDQAQDYAQDgAQDwAQD6AQczODY4NDE2igI5dWYoJ2EnLCA3ND cxNiwgMTQ2MzMyNjI5Mik7dWYoJ3InLCA0MDQyNDcyOh4A8F6S AsUBIWdTd0J0d2luaTVZR0VKYXFveE1ZQUNDTXpRb3dBRGdBUU FSSTJ3cFE3czVBV0FCZ0FtZ0FjQTU0QW9BQmVvZ0JBcEFCQVpn QkFhQUJBYWdCQTdBQkFMa0JNegkC8Ex3el9CQVhLbk9IRkx0c1 VfeVFIRndXbXAyc3ZxUDlrQkkwcDdneTlNN0RfZ0FRRDFBUUFB QUFDWUFvcWFsUG9Db0FJQXRRSUFBQUFBdg0IZDRBSUE2QUlBLU FJQWdBTUKaAiUhV0FpQ1hRNsgA8KlqTTBLSUFRb2lwcVUtZ0ku 2ALwAuACseov6gIcaHR0cHM6Ly9lbWFpbC50LW9ubGluZS5kZS 9lbYADAYgDAZADAJgDAKADAKoDALADALgDAMADrALIAwDYA5Oi JOADAOgDAPgDAYAEAJIEBC90dGqYBACiBA44NC4xMzQuMTc5Lj E4NqgEkdMBsgQICAAQABgAIAC4BADABADIBADSBAsxMC4xMy42 OS40Nw..&2b22f853&referrer=https%3A%2F%2Femail.t-online.de%2Fem
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:32:26
Время сессии: 07:45:25
Время отчета: 15.05.2016 15:33:38
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D30692%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030356308171&mpt=&m pcr=96807835&imp_rvr_id=1030356308171&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-xP8rc2dYAxKn5AhH9He3VUljhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAAL_QDAQQAAQ AAAAAAdSMSnwAAAAA.%2Fcnd%3D!WAiCXQini5YGEJaqoxMYjM 0KIAQoipqU-gI.%2Fbn%3D62511%2Freferrer%3Dhttps%3A%2F%2Femail. t-online.de%2Fem%2Fclickenc%3D
Тип: HTTPS запрос
Размер (байты): 1 547
----------------------------------------
https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D30692%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030356308171&mpt=&m pcr=96807835&imp_rvr_id=1030356308171&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-xP8rc2dYAxKn5AhH9He3VUljhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAAL_QDAQQAAQ AAAAAAdSMSnwAAAAA.%2Fcnd%3D!WAiCXQini5YGEJaqoxMYjM 0KIAQoipqU-gI.%2Fbn%3D62511%2Freferrer%3Dhttps%3A%2F%2Femail. t-online.de%2Fem%2Fclickenc%3D
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: svid=878803336794385787; rts=1462483203616; mojo3=19766:40720/25517:2887
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://rover.ebay.com/ar/1/152819/4?mpt=1463326292&siteid=77&icep_siteid=77&ipn=adma in2&adtype=2&size=160x600&pgroup=432321&mpvc=https ://secure-ams.adnxs.com/click?cqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-xP8rc2dYAxKn5AhH9He3VUljhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAAL_QDAQQAAQ AAAAAAdSMSnwAAAAA./cnd=%21WAiCXQini5YGEJaqoxMYjM0KIAQoipqU-gI./bn=62511/referrer=https%3A%2F%2Femail.t-online.de%2Fem/clickenc=
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:32:27
Время сессии: 07:45:26
Время отчета: 15.05.2016 15:33:38
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://reco.ebay.com/service/plmt/100299?plmt=100299&itm=361451220336&si=77&usrSi=DE &locale=de-DE&fmt=json&callback=handleServerResponse
Тип: HTTPS запрос
Размер (байты): 1 527
----------------------------------------
https://reco.ebay.com/service/plmt/100299?plmt=100299&itm=361451220336&si=77&usrSi=DE &locale=de-DE&fmt=json&callback=handleServerResponse
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D8705033353606390585919c9d4^tguid/57eaba7c1540a602ef17d177fed30f675919c9d4^cguid/57eaba7c1540a602ef17d177fed30f665919c9d4^; dp1=bu1p/QEBfX0BAX19AQA**5919c99d^bl/DE5afafd1d^; nonsession=CgADLAAFXOJ0lMgDKACBgnpedNTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNjd42oYg; ebay=%5Esbf%3D%23%5E; s=CgAD4ACBXOeedYjRmYWNmMmIxNTQwYTYyMjgyZjE4NmY3ZmZ lODllYzWc+Jg8
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D30692%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030356308171&mpt=&m pcr=96807835&imp_rvr_id=1030356308171&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-xP8rc2dYAxKn5AhH9He3VUljhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAAL_QDAQQAAQ AAAAAAdSMSnwAAAAA.%2Fcnd%3D!WAiCXQini5YGEJaqoxMYjM 0KIAQoipqU-gI.%2Fbn%3D62511%2Freferrer%3Dhttps%3A%2F%2Femail. t-online.de%2Fem%2Fclickenc%3D
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:32:28
Время сессии: 07:45:27
Время отчета: 15.05.2016 15:33:38
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://image.edpn.ebay.com/tools/dap/resize.php?img=http://i.ebayimg.com/images/m/mncjHEDU7-aVw9XIC4PjNDQ/s-b140x140/p.jpg&size=150
Тип: HTTPS запрос
Размер (байты): 1 522
----------------------------------------
https://image.edpn.ebay.com/tools/dap/resize.php?img=http://i.ebayimg.com/images/m/mncjHEDU7-aVw9XIC4PjNDQ/s-b140x140/p.jpg&size=150
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D8705033353606390585919c9d4^tguid/57eaba7c1540a602ef17d177fed30f675919c9d4^cguid/57eaba7c1540a602ef17d177fed30f665919c9d4^; dp1=bu1p/QEBfX0BAX19AQA**5919c9d6^bl/DE5afafd56^; nonsession=CgADLAAFXOJ1eMwDKACBgnpfWNTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNjc+0oXJ; ebay=%5Esbf%3D%23%5E; s=CgAD4ACBXOefWYjRmYWNmMmIxNTQwYTYyMjgyZjE4NmY3ZmZ lODllYzV6xKq6
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://img.mediaplex.com/content/0/707/220017/98603_DT_94_EU_Moonraker_160x600.html?mpck=rover.e bay.com%2Frover%2F1%2F707-220017-51246-4%2F4%3Fmpt%3D30692%26ff5%3D%26ff6%3D%26ff7%3D%26f f8%3D%26ff9%3D%26ff19%3D%26ext_id%3D%26ir_DAP_A1%3 D1%26siteid%3D77%26ff10%3D96807835%26ipn%3Dadmain2 %26mpcr%3D96807835%26rvr_id%3D1030356308171&mpt=&m pcr=96807835&imp_rvr_id=1030356308171&siteID=77&mp crgif=707%2F220017%2F98603_dyn_template_fallback.j pg&mpvc=https%3A%2F%2Fsecure-ams.adnxs.com%2Fclick%3Fcqc4cUu2xT9ypzhxS7bFPxSuR-F6FBBAcqc4cUu2xT9ypzhxS7bFP-xP8rc2dYAxKn5AhH9He3VUljhXAAAAAG4nEABbBQAAWwUAAAIA AAAW1WgCjKYCAAAAAQBVU0QARVVSAKAAWAJoXgAAL_QDAQQAAQ AAAAAAdSMSnwAAAAA.%2Fcnd%3D!WAiCXQini5YGEJaqoxMYjM 0KIAQoipqU-gI.%2Fbn%3D62511%2Freferrer%3Dhttps%3A%2F%2Femail. t-online.de%2Fem%2Fclickenc%3D
User input: t-online.de login
POST data:
*EMPTY*
========================================
Локальное время:15.05.2016 17:38:08
Время сессии: 07:51:07
Время отчета: 15.05.2016 15:39:41
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 3 996
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=4111; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:29$_ss:1$_st:1463326973845$_pn:1%3B exp-session$ses_id:1463325173845%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463408676522; lisid=7nx2wfz0q55pbg7thsbx5jv25i8cf3zp.10; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
messageXguidList%5BINBOX%5D%5B121558993911410%5D=1 21558993911410
messageXguidList%5BINBOX%5D%5B121558993911310%5D=1 21558993911310
messageXguidList%5BINBOX%5D%5B121558993911210%5D=1 21558993911210
messageXguidList%5BINBOX%5D%5B121558993911110%5D=1 21558993911110
messageXguidList%5BINBOX%5D%5B121558993911010%5D=1 21558993911010
========================================
Локальное время:15.05.2016 17:38:52
Время сессии: 07:51:51
Время отчета: 15.05.2016 15:39:42
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 3 996
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=5440; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:29$_ss:1$_st:1463326973845$_pn:1%3B exp-session$ses_id:1463325173845%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463408676522; lisid=7nx2wfz0q55pbg7thsbx5jv25i8cf3zp.10; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
messageXguidList%5BINBOX%5D%5B121558993911410%5D=1 21558993911410
messageXguidList%5BINBOX%5D%5B121558993911310%5D=1 21558993911310
messageXguidList%5BINBOX%5D%5B121558993911210%5D=1 21558993911210
messageXguidList%5BINBOX%5D%5B121558993911110%5D=1 21558993911110
messageXguidList%5BINBOX%5D%5B121558993911010%5D=1 21558993911010
========================================
Локальное время:15.05.2016 17:39:52
Время сессии: 07:52:50
Время отчета: 15.05.2016 15:39:42
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 628
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=5440; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:29$_ss:0$_st:1463328534740$_pn:2%3B exp-session$ses_id:1463325173845%3Bexp-session; criteo205=1; crt_gfn500=1; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463408676522; lisid=7nx2wfz0q55pbg7thsbx5jv25i8cf3zp.10; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16 // 2. Halbjahr 2015/16
POST data:
lastReceivedMail%5Buid%5D=121558993911410
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d23f48afbd949e 683192b69332bf8100
========================================
Локальное время:15.05.2016 20:30:10
Время сессии: 01:05:51
Время отчета: 15.05.2016 18:30:32
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: http://suche.qvc.de/QVC/Search.ff?cm_re=77_SUCHE-_-77_1_SUCHE-_-SUCHE&cm_sp=77_SUCHE-_-77_1_SUCHE-_-SUCHE
Тип: HTTP запрос
Размер (байты): 1 032
----------------------------------------
http://suche.qvc.de/QVC/Search.ff?cm_re=77_SUCHE-_-77_1_SUCHE-_-SUCHE&cm_sp=77_SUCHE-_-77_1_SUCHE-_-SUCHE
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463337214~id=b9bef553d8f19d48006d450aa546fa ca; akaau_geo=1463337063~id=f3f07d35d60cd7a74e585d59d1 37cfdc; mt.v=2.476007966.1463336728259; qvcuname=; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:3%3Bexp-session$_st:1463338768814$ses_id:1463336729944%3Be xp-session; _ga=GA1.2.2047048782.1463336732; _gat=1; ak-migr-origin=true; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; _gali=btnMastheadSearch
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.qvc.de/heimtextilien-&-wohnideen/gardinen-&-tischw%C3%A4sche/_/N-lgt0/c.html
User input: QVC Gardinen Gardinen clicks
POST data:
langId=-3
storeId=10253
catalogId=10153
resultsWithTopSellers=true
query=Gardinen clicks
signIn=
greetingMsg=
userName=
keyword=Gardinen clicks
========================================
Локальное время:15.05.2016 20:37:52
Время сессии: 01:13:34
Время отчета: 15.05.2016 18:37:04
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: http://www.qvc.de/QVCReauthenticateCmd?storeId=10253&catalogId=10153 &langId=-3&orderId=79062210&errorURL=InvalidInputErrorView& fromPage=checkout&destination=https://www.qvc.de/DEAddALineCheck?orderId=79062210&toOrderId=7906221 0&rememberUserName=&rememberMe=true
Тип: HTTP запрос
Размер (байты): 2 786
----------------------------------------
http://www.qvc.de/QVCReauthenticateCmd?storeId=10253&catalogId=10153 &langId=-3&orderId=79062210&errorURL=InvalidInputErrorView& fromPage=checkout&destination=https://www.qvc.de/DEAddALineCheck?orderId=79062210&toOrderId=7906221 0&rememberUserName=&rememberMe=true
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463337702~id=147d22686f549938879655fc8a33e7 d7; akaau_geo=1463337659~id=3eccabc833d1059dc971b1df0b 42d41c; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:9%3Bexp-session$_st:1463339256121$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463337456522; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=840809%253B871215; qvcpdap=true; qvcpdvol=0; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~-1~-1~-1~-1~3~3~5~3~3~7~7~|~575AC857~|~~|~~|~|0|||||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000x17RlFxXm1xo2YlLyxY17AE:16k88d5ij; WC_PERSISTENT=NsJgT7doYEVBJzwUEkMJf3mLW6s%3d%0a%3b 2016%2d05%2d15+14%3a34%3a03%2e816%5f1463337006085% 2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; WC_USERACTIVITY_325226428=325226428%2c10253%2cnull %2cnull%2cnull%2cnull%2cnull%2cnull%2cnull%2cnull% 2csIXL8UoA7gBugz8Ln%2bVpU8kLZ5HNi4xK9Lrpu%2fLFjrG% 2bgMDeqvMOhoxTl94gm5CpkNiETlFt71kI%0aSldDXheI9A5im tUe2AWp%2fN2Ej3sVCfXqNagI8GWFw3NiOZ8X%2fsxtTll9FIs hPcsaCM2UTqLGTw%3d%3d; mt.cart_qty=1; _gat=1; shopCatIds=136865092-SRCH; cmSearchKeyword=136865092-
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.qvc.de/webapp/wcs/stores/servlet/OrderItemDisplay?orderId=.&catalogId=10153&product Id=12842378&orderItemId=136865092&catEntryId=12842 379&updatePrices=1&storeId=10253&calculationUsageI d=-1&ddkey=https:OrderStatus
User input: QVC Gardinen Gardinen clicks
POST data:
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 20:38:51
Время сессии: 01:14:33
Время отчета: 15.05.2016 18:40:04
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/UserRegistrationForm?storeId=10253&catalogId=10153 &langId=-3&new=Y&URL=RegistrationConfirmView&fromPage=check out
Тип: HTTPS запрос
Размер (байты): 3 660
----------------------------------------
https://www.qvc.de/UserRegistrationForm?storeId=10253&catalogId=10153 &langId=-3&new=Y&URL=RegistrationConfirmView&fromPage=check out
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463337724~id=9b3ca10ae22cfa372da72c9a09771e 61; akaau_geo=1463337659~id=3eccabc833d1059dc971b1df0b 42d41c; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:10%3Bexp-session$_st:1463339278605$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463337482033; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=840809%253B871215; qvcpdap=true; qvcpdvol=0; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~-1~-1~-1~-1~3~3~5~3~3~7~7~|~575AC857~|~~|~~|~|0|||||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000x17RlFxXm1xo2YlLyxY17AE:16k88d5ij; WC_PERSISTENT=NsJgT7doYEVBJzwUEkMJf3mLW6s%3d%0a%3b 2016%2d05%2d15+14%3a34%3a03%2e816%5f1463337006085% 2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; WC_USERACTIVITY_325226428=325226428%2c10253%2cnull %2cnull%2cnull%2cnull%2cnull%2cnull%2cnull%2cnull% 2csIXL8UoA7gBugz8Ln%2bVpU8kLZ5HNi4xK9Lrpu%2fLFjrG% 2bgMDeqvMOhoxTl94gm5CpkNiETlFt71kI%0aSldDXheI9A5im tUe2AWp%2fN2Ej3sVCfXqNagI8GWFw3NiOZ8X%2fsxtTll9FIs hPcsaCM2UTqLGTw%3d%3d; mt.cart_qty=1; _gat=1; shopCatIds=136865092-SRCH; cmSearchKeyword=136865092-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; _gali=rNewCustomer; [email protected]
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/webapp/wcs/stores/servlet/LogonForm?storeId=10253&URL=https%3A%2F%2Fwww.qvc. de%2FDEAddALineCheck%3ForderId%3D79062210&langId=-3&catalogId=10153&krypto=FUZE9vPtg2NWjXxngs8SIihvr 3HCzL62FwujUyOMc9WbJeTI7QA7mvVbSeAxnzyla1THi74DXph F%0AJT6KOtQbeciplxnVyU2P4LkXjk93m5Mn9LLud63ppo39qr k0CK8pgwM4RYKQHTcGnzXO%2BPU%2BWyGR%0AU10YVQxhoOYSF m70m%2FbXLx3hNkjg7nXXDUliZPGyFNU68VzZf0gBwliqxHs%2 Bwi1DA0U3RsjfGABV%0A9%2FwXlLuHdCWrR73KZWOXrs1Yxytg IheNpFwG2tx%2BOMCNW5p8aXZfn9AW3HKWj7q13KS6yhNy4XaA %0A91HXw6ZGFD6mxaCzkOtbED2vyciO5U6CVm%2Fxku06UxFDo iBs3oS3b3h6NwPIQ6c9eGGSnNjR2rI%2B%0ApxnhzZ%2FqUIyq nKIHsGZRdmLTRPPcDWD4hOyFqXiMX5Ba1rY%3D&ddkey=http: QVCReauthenticateCmd
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de
POST data:
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
logonFormParams=storeId%3D10253%26catalogId%3D1015 3%26langId%3D-3%26reLogonURL%3DLogonForm%26rememberMe%3Dtrue%26f romPage%3Dcheckout%26logonId%3D%26logonPassword%3D %26speedBuyTypeInd%3DC%26orderId%3D79062210%26cbRe viewOrderTotal%3D%26userPrefs%3D%26csrfToken%3Dc0h vWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZODRWaUpWM0V3K 1ZUND0%253D
nextURL=https%3A%2F%2Fwww.qvc.de%2FDEAddALineCheck
orderId=79062210
========================================
Локальное время:15.05.2016 20:45:11
Время сессии: 01:20:53
Время отчета: 15.05.2016 18:44:44
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/UserRegistrationAddDE
Тип: HTTPS запрос
Размер (байты): 4 048
----------------------------------------
https://www.qvc.de/UserRegistrationAddDE
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463338100~id=4bc8ccd4bb04e80795091477bc5722 c2; akaau_geo=1463337659~id=3eccabc833d1059dc971b1df0b 42d41c; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:11%3Bexp-session$_st:1463339332556$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463337532915; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=840809%253B871215; qvcpdap=true; qvcpdvol=0; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~-1~-1~-1~-1~3~3~5~3~3~7~7~|~575AC857~|~~|~~|~|0|||||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000x17RlFxXm1xo2YlLyxY17AE:16k88d5ij; WC_PERSISTENT=NsJgT7doYEVBJzwUEkMJf3mLW6s%3d%0a%3b 2016%2d05%2d15+14%3a34%3a03%2e816%5f1463337006085% 2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; WC_USERACTIVITY_325226428=325226428%2c10253%2cnull %2cnull%2cnull%2cnull%2cnull%2cnull%2cnull%2cnull% 2csIXL8UoA7gBugz8Ln%2bVpU8kLZ5HNi4xK9Lrpu%2fLFjrG% 2bgMDeqvMOhoxTl94gm5CpkNiETlFt71kI%0aSldDXheI9A5im tUe2AWp%2fN2Ej3sVCfXqNagI8GWFw3NiOZ8X%2fsxtTll9FIs hPcsaCM2UTqLGTw%3d%3d; mt.cart_qty=1; _gat=1; shopCatIds=136865092-SRCH; cmSearchKeyword=136865092-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; _gali=btnContinueCheckout; olsdob=23.03.1957; olssalutation=F
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/UserRegistrationForm?storeId=10253&catalogId=10153 &langId=-3&new=Y&URL=RegistrationConfirmView&fromPage=check out
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9
POST data:
storeId=10253
catalogId=10153
langId=-3
userField1=00001000
ERR_URL=UserRegistrationErrorView
page=account
new=Y
addressType=B
profileType=C
registerType=G
preferredLanguage=-3
prospectUser=
rememberMe=true
emailde=Y
fromPage=checkout
URL=QVCShipInfoAdd
orderId=79062210
logonFormParams=storeId%3D10253%26catalogId%3D1015 3%26langId%3D-3%26reLogonURL%3DLogonForm%26rememberMe%3Dtrue%26f romPage%3Dcheckout%26logonId%3D%26logonPassword%3D %26speedBuyTypeInd%3DC%26orderId%3D79062210%26cbRe viewOrderTotal%3D%26userPrefs%3D%26csrfToken%3Dc0h vWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZODRWaUpWM0V3K 1ZUND0%253D
nextURL=https%3A%2F%2Fwww.qvc.de%2FDEAddALineCheck
email1=regina.uibel%40t-online.de
email1Verify=regina.uibel%40t-online.de
logonPassword=Kocharena1236987
logonPasswordVerify=Kocharena1236987
personTitle=02
firstName=Regina
lastName=Uibel
StreetName=Danziger Str.
HouseNo=52
address1=Danziger Str. 52
address2=
zipCode=33605
city=Bielefeld
country=DE
birthday=23.03.1957
cntryphone1=0049
otherphone1=0049
phone1=521204929
demographicField5=DCABEL
demographicField7=20160515
dataProtection=accepted
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
shipToSameBillTo=true
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 20:46:08
Время сессии: 01:21:50
Время отчета: 15.05.2016 18:47:45
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/webapp/wcs/stores/servlet/OrderAddPaymentMethods
Тип: HTTPS запрос
Размер (байты): 4 153
----------------------------------------
https://www.qvc.de/webapp/wcs/stores/servlet/OrderAddPaymentMethods
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: __storejs__=%22__storejs__%22; x6rproductList5=%5B%22PRO-F-I%20Gardinen%20Klicks%20f%C3%BCr%20leichte%20Gardi nenmontage%20250tlg.%22%5D; akaau=1463338171~id=6dce2e50865aecfce0c3a329eefd5b b4; akaau_geo=1463337659~id=3eccabc833d1059dc971b1df0b 42d41c; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:12%3Bexp-session$_st:1463339724912$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463337926943; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=840809%253B871215; qvcpdap=true; qvcpdvol=0; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~-1~-1~-1~-1~3~3~5~3~3~7~7~|~575AC857~|~~|~~|~|0|||||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000x17RlFxXm1xo2YlLyxY17AE:16k88d5ij; WC_PERSISTENT=NsJgT7doYEVBJzwUEkMJf3mLW6s%3d%0a%3b 2016%2d05%2d15+14%3a34%3a03%2e816%5f1463337006085% 2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; WC_USERACTIVITY_325226428=325226428%2c10253%2cnull %2cnull%2c1463337862029%2c1463339662029%2cnull%2cn ull%2cnull%2cnull%2csIXL8UoA7gBugz8Ln%2bVpU8kLZ5HN i4xKJLC1Wb%2fXB%2fLYKMbmtLlUHfDM9qbjMLD%2bZOb4uMUp cnOt%0aUK6JjQFeg6%2fMSKNfXIsNpkBZodPD61vhKIVd%2bkC beByf4rrTHG0ayJdacFcrkNgWqnILCxMwDvVc%0alP7DRkYra6 n3ux%2f96pE%3d; mt.cart_qty=1; _gat=1; shopCatIds=136865092-SRCH; cmSearchKeyword=136865092-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; cmReg=97537166; qvcauthenticed=true; username=regina+uibel; cmCustomerId=97537166; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/webapp/wcs/stores/servlet/BillingDetailsView?storeId=10253&langId=-3&catalogId=10153&krypto=4IpOLSm6K8ENCJCMZ6DG7D9j8 8B45db6O3QiQt39fAZKKX28qW8aQ%2BWg%2FjTwt5NljsBoxnS t25Pk%0A5Q5oKibF5XoSFm2%2BNL1lqNAIjyyYG5JR%2B5flCM rhk5p7kAlXTjpUnH0phEqu9AFS%2FtDH1JX8P0ka%0AADVXBGl c4a7We76Sfy2K4gjgm%2BihXHUQEkNq%2FX4PNQSN%2FjpwfrS QVp39PGrtrRAgp6OLmNYWW8mx%0A3KDmTKOt%2B3E%2FpBwdRv HJ%2BMLJ0WMWBgAkes870KE%3D&ddkey=https:OrderView
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9
POST data:
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
ccId=
payMethodExpireMonth=
payMethodExpireYear=
ccDtime=
payMethodNewCard=N
payMethodExpiryEdited=N
payMethodCVV=
orderId=79062210
langId=-3
catalogId=10153
storeId=10253
dummydata=
currentPaymentMethod=
checkoutStep=2
newCustomer=true
customerId=97537166
URL=CreditCardConfirmation
ERR_URL=BillingDetailsView
CANCEL_URL=BillingDetailsView
fromPage=PaymentPage
isFromPayPage=true
InvalidCreditCard=
rbNewPaymentMethod=rbOpenAccount
NewCardType=VI
NewCardNumber=
hidNewLastCC=
cardHolderName=
selNewCard=05%2F2016
SecurityCodeNewCard=
========================================
Локальное время:15.05.2016 21:36:57
Время сессии: 02:12:39
Время отчета: 15.05.2016 19:36:31
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: http://www.qvc.de/webapp/wcs/stores/servlet/AddToCart
Тип: HTTP запрос
Размер (байты): 4 160
----------------------------------------
http://www.qvc.de/webapp/wcs/stores/servlet/AddToCart
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: __storejs__=%22__storejs__%22; x6rproductList5=%5B%22PRO-F-I%20Gardinen%20Klicks%20f%C3%BCr%20leichte%20Gardi nenmontage%20250tlg.%22%5D; x6rorderId1=%22155130227%22; x6rorderVal2=%2234%2C45%22; x6rcurrency3=%22%E2%82%AC%22; kwktoken=1; akaau=1463341200~id=aa85bb0c1ca0c7301b65ccd0399e29 48; akaau_geo=1463340141~id=574579a553edb139858061788e af0da0; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:25%3Bexp-session$_st:1463342756431$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463340956942; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~575AC857~|~157AED3B~|~~|~|0| 0|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000x17RlFxXm1xo2YlLyxY17AE:16k88d5ij; WC_PERSISTENT=NsJgT7doYEVBJzwUEkMJf3mLW6s%3d%0a%3b 2016%2d05%2d15+14%3a34%3a03%2e816%5f1463337006085% 2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; WC_USERACTIVITY_325226428=325226428%2c10253%2cnull %2cnull%2c1463337862029%2c1463342700397%2cnull%2cn ull%2cnull%2cnull%2csIXL8UoA7gBugz8Ln%2bVpU8kLZ5HN i4xKJLC1Wb%2fXB%2fLYKMbmtLlUHbR9dpHtfyoFykQP6pg%2b 3q4N%0aJBk7VTTSETrqpdIDYX6pMZaQYM7wuNYkyx69lJzDxW1 d0YZQT9vnJ%2fLPxwgf1hH1mEwJUFSFFom6%0aglXAEUCP%2bl KEvobEn3s%3d; mt.cart_qty=0; shopCatIds=136865092-SRCH; cmSearchKeyword=136865092-; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463339998~id=cbc228dc00dc3ea17d5efd3863 6e76c1; _gat=1; sc=TSV
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.qvc.de/webapp/wcs/stores/servlet/InterPageView?orderId=.&storeId=10253&colorCode=GN &URL=OrderItemDisplay%3FupdatePrices%3D1%26calcula tionUsageId%3D-1%26orderId%3D.&itemNumber=871215&quantity=1&langI d=-3&catalogId=10153&productNumber=871215&productId=1 3324452&sizeCode=000&ats=UK&sc=TSV&catEntryId=1332 7093&state=SW&ipValue=&errorViewName=ProdNotFoundV iew&catentryResolver=nonTechnicalKey&ddkey=http:Ad dToCart
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029
POST data:
orderId=.
storeId=10253
colorCode=GN
itemNumber=871215
quantity=1
langId=-3
catalogId=10153
viewTaskName=InterPageView
productNumber=871215
productId=13324452
sizeCode=000
ats=WL
URL=OrderItemDisplay%3FupdatePrices%3D1%26calculat ionUsageId%3D-1%26orderId%3D.%26productId%3D13324452%26catEntryI d%3D13324452
sc=TSV
catEntryId=13327093
state=SW
ipValue=
errorViewName=ProdNotFoundView
catentryResolver=nonTechnicalKey
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 21:37:09
Время сессии: 02:12:51
Время отчета: 15.05.2016 19:36:31
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: http://www.qvc.de/QVCReauthenticateCmd?storeId=10253&catalogId=10153 &langId=-3&orderId=79062335&errorURL=InvalidInputErrorView& fromPage=checkout&destination=https://www.qvc.de/DEAddALineCheck?orderId=79062335&toOrderId=7906233 5&rememberUserName=&destination2=http://www.qvc.de/OrderItemDisplay?storeId=10253&catalogId=10153&ord erId=79062335&rememberMe=true
Тип: HTTP запрос
Размер (байты): 3 685
----------------------------------------
http://www.qvc.de/QVCReauthenticateCmd?storeId=10253&catalogId=10153 &langId=-3&orderId=79062335&errorURL=InvalidInputErrorView& fromPage=checkout&destination=https://www.qvc.de/DEAddALineCheck?orderId=79062335&toOrderId=7906233 5&rememberUserName=&destination2=http://www.qvc.de/OrderItemDisplay?storeId=10253&catalogId=10153&ord erId=79062335&rememberMe=true
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463341265~id=b9badaca006b54f02dff1f9af7f37d d9; akaau_geo=1463340141~id=574579a553edb139858061788e af0da0; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:26%3Bexp-session$_st:1463342820431$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463341020818; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000x17RlFxXm1xo2YlLyxY17AE:16k88d5ij; WC_PERSISTENT=NsJgT7doYEVBJzwUEkMJf3mLW6s%3d%0a%3b 2016%2d05%2d15+14%3a34%3a03%2e816%5f1463337006085% 2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; WC_USERACTIVITY_325226428=325226428%2c10253%2cnull %2cnull%2c1463337862029%2c1463342763443%2cnull%2cn ull%2cnull%2cnull%2csIXL8UoA7gBugz8Ln%2bVpU8kLZ5HN i4xKJLC1Wb%2fXB%2fLYKMbmtLlUHbR9dpHtfyoF57r7TSlc6U ep%0anZjM6f%2f8DtGTBx%2bRfZVwfcnorCDNgAOsXmOIhkEJD fiG%2fmyh1el3NCCSsVGJHfv3YAY8GrbT2hEJ%0amowgZAff5x jEZp%2brIxo%3d; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV; cmSearchKeyword=136865092-_136865314-; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463339998~id=cbc228dc00dc3ea17d5efd3863 6e76c1; _gat=1; sc=TSV; _gali=frmIntermediateConfirmation
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.qvc.de/webapp/wcs/stores/servlet/OrderItemDisplay?orderId=.&catalogId=10153&product Id=13324452&orderItemId=136865314&catEntryId=13324 452&updatePrices=1&storeId=10253&calculationUsageI d=-1&ddkey=http:AddToCart
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029
POST data:
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 21:38:12
Время сессии: 02:13:54
Время отчета: 15.05.2016 19:39:32
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/UserRegistrationForm?storeId=10253&catalogId=10153 &langId=-3&new=Y&URL=http3A2F2Fwww.qvc.de2FOrderItemDisplay 3FstoreId3D10253&fromPage=checkout
Тип: HTTPS запрос
Размер (байты): 4 246
----------------------------------------
https://www.qvc.de/UserRegistrationForm?storeId=10253&catalogId=10153 &langId=-3&new=Y&URL=http3A2F2Fwww.qvc.de2FOrderItemDisplay 3FstoreId3D10253&fromPage=checkout
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463341279~id=a53b5e5373f64724f457a9f71e14ac 98; akaau_geo=1463340141~id=574579a553edb139858061788e af0da0; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:27%3Bexp-session$_st:1463342834757$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463341035074; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000x17RlFxXm1xo2YlLyxY17AE:16k88d5ij; WC_PERSISTENT=NsJgT7doYEVBJzwUEkMJf3mLW6s%3d%0a%3b 2016%2d05%2d15+14%3a34%3a03%2e816%5f1463337006085% 2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV; cmSearchKeyword=136865092-_136865314-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; username=regina+uibel; cmCustomerId=97537166; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; qvcBoxCustData=%7B%22config%22%3A%22%22%2C%22custo merid%22%3A%2297537166%22%2C%22customergender%22%3 A%22Frau%22%2C%22customerfirstname%22%3A%22Regina% 22%2C%22customerlastname%22%3A%22Uibel%22%2C%22cus tomeremail%22%3A%[email protected]%22%2C%22customerphone%22%3A%22-%22%7D; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463339998~id=cbc228dc00dc3ea17d5efd3863 6e76c1; _gat=1; sc=TSV; _gali=rNewCustomer
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/DEAddALineCheck?toOrderId=79062335&fromPage=checko ut&orderId=79062335&catalogId=10153&catalogId=1015 3&destination2=http%3A%2F%2Fwww.qvc.de%2FOrderItem Display%3FstoreId%3D10253&errorViewName=InvalidInp utErrorView&csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJ cW1ScWRheVpZODRWaUpWM0V3K1ZUND0%3D&rememberUserNam e=&langId=-3&destination=https%3A%2F%2Fwww.qvc.de%2FDEAddALin eCheck%3ForderId%3D79062335&errorURL=InvalidInputE rrorView&storeId=10253&rememberMe=true
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de
POST data:
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
logonFormParams=storeId%3D10253%26catalogId%3D1015 3%26langId%3D-3%26reLogonURL%3DLogonForm%26rememberMe%3Dtrue%26f romPage%3Dcheckout%26logonId%3D%26logonPassword%3D %26speedBuyTypeInd%3DC%26orderId%3D79062335%26cbRe viewOrderTotal%3D%26userPrefs%3D%26csrfToken%3Dc0h vWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZODRWaUpWM0V3K 1ZUND0%253D
nextURL=%2Fwebapp%2Fwcs%2Fstores%2Fservlet%2FDEAdd ALineCheck
orderId=79062335
========================================
Локальное время:15.05.2016 21:41:08
Время сессии: 02:16:50
Время отчета: 15.05.2016 19:42:32
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/UserRegistrationAddDE
Тип: HTTPS запрос
Размер (байты): 5 564
----------------------------------------
https://www.qvc.de/UserRegistrationAddDE
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463341466~id=8f8adc78613d0db008626a8a557a1f 18; akaau_geo=1463340141~id=574579a553edb139858061788e af0da0; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:28%3Bexp-session$_st:1463342893811$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463341095063; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000x17RlFxXm1xo2YlLyxY17AE:16k88d5ij; WC_PERSISTENT=2LUC3IxP%2fLKYVP0wzQ4%2ftm0WK9M%3d%0 a%3b2016%2d05%2d15+15%3a37%3a17%2e897%5f1463337006 085%2d466833%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV; cmSearchKeyword=136865092-_136865314-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; username=regina+uibel; cmCustomerId=97537166; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; qvcBoxCustData=%7B%22config%22%3A%22%22%2C%22custo merid%22%3A%2297537166%22%2C%22customergender%22%3 A%22Frau%22%2C%22customerfirstname%22%3A%22Regina% 22%2C%22customerlastname%22%3A%22Uibel%22%2C%22cus tomeremail%22%3A%[email protected]%22%2C%22customerphone%22%3A%22-%22%7D; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463339998~id=cbc228dc00dc3ea17d5efd3863 6e76c1; _gat=1; sc=TSV; _gali=btnContinueCheckout; WC_AUTHENTICATION_-1002=%2d1002%2cKTi2zn7kXLPNWkKUWFtJyHwnmw8%3d; WC_USERACTIVITY_-1002=%2d1002%2c10253%2cnull%2cnull%2cnull%2cnull%2 cnull%2cnull%2cnull%2cnull%2cNTg2qJ5PoIlDucc8%2bJ% 2bwZMzw7kA30kywX0kXjGgfFMsxZb%2bmbQJ1mEQOhaYSGPIoq l57FAtDKP1K%0az0Caa4PvRv97NO%2bjPyQYc2XXhGHHgptWSk MMH39I27eHnNDgG2TwK6wU6E3Q9yjyFnM0uM0SDw%3d%3d; WC_GENERIC_ACTIVITYDATA=[3909364817%3atrue%3afalse%3a0%3at3mm7ARUIa7TkaFmix 9urYYYZKE%3d][com.ibm.commerce.context.globalization.Globalizati onContext|%2d3%26EUR%26%2d3%26EUR][com.ibm.commerce.context.experiment.ExperimentCont ext|null][com.ibm.commerce.context.audit.AuditContext|null][com.ibm.commerce.context.base.BaseContext|10253%26 %2d1002%26%2d1002%26%2d1][CTXSETNAME|Store][com.ibm.commerce.catalog.businesscontext.CatalogCo ntext|10153%26null%26false%26false%26false][com.ibm.commerce.context.entitlement.EntitlementCo ntext|null%26null%26null%26null%26null%26null%26nu ll]
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/UserRegistrationForm?storeId=10253&catalogId=10153 &langId=-3&new=Y&URL=http3A2F2Fwww.qvc.de2FOrderItemDisplay 3FstoreId3D10253&fromPage=checkout
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG
POST data:
storeId=10253
catalogId=10153
langId=-3
userField1=00001000
ERR_URL=UserRegistrationErrorView
page=account
new=Y
addressType=B
profileType=C
registerType=G
preferredLanguage=-3
prospectUser=
rememberMe=true
emailde=Y
fromPage=checkout
URL=QVCShipInfoAdd
orderId=79062335
logonFormParams=storeId%3D10253%26catalogId%3D1015 3%26langId%3D-3%26reLogonURL%3DLogonForm%26rememberMe%3Dtrue%26f romPage%3Dcheckout%26logonId%3D%26logonPassword%3D %26speedBuyTypeInd%3DC%26orderId%3D79062335%26cbRe viewOrderTotal%3D%26userPrefs%3D%26csrfToken%3Dc0h vWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZODRWaUpWM0V3K 1ZUND0%253D
nextURL=%2Fwebapp%2Fwcs%2Fstores%2Fservlet%2FDEAdd ALineCheck
email1=regina.uibel%40t-online.de
email1Verify=regina.uibel%40t-online.de
logonPassword=Kocharena1236987
logonPasswordVerify=Kocharena1236987
personTitle=02
firstName=Regina
lastName=Uibel
StreetName=Danziger Str.
HouseNo=52
address1=Danziger Str. 52
address2=EG
zipCode=33605
city=Bielefeld
country=DE
birthday=23.03.1957
cntryphone1=0049
otherphone1=0049
phone1=521204929
demographicField5=DCABEL
demographicField7=20160515
dataProtection=accepted
csrfToken=eGlmVTBNZmZaTitiYzVXU2JMQVl1OEk4L25VOFR2 Rmo%3D
shipToSameBillTo=true
csrfToken=eGlmVTBNZmZaTitiYzVXU2JMQVl1OEk4L25VOFR2 Rmo%3D
========================================
Локальное время:15.05.2016 21:46:56
Время сессии: 02:22:38
Время отчета: 15.05.2016 19:46:03
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/webapp/wcs/stores/servlet/LogonDE
Тип: HTTPS запрос
Размер (байты): 4 681
----------------------------------------
https://www.qvc.de/webapp/wcs/stores/servlet/LogonDE
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: __storejs__=%22__storejs__%22; x6rproductList5=%5B%22NUTRITION%20MIXER%20f%C3%BCr %20Power-Drinks%202%20Klingen%20diverse%20Beh%C3%A4lter%20u nd%20Deckel%22%5D; x6rorderId1=%22155130227%22; x6rorderVal2=%2234%2C45%22; x6rcurrency3=%22%E2%82%AC%22; kwktoken=1; akaau=1463341794~id=36d69acae5974d1f0caf1bfa3843eb 71; akaau_geo=1463341643~id=bd4394c3cdaabacf37b8a6c0fc 29e5f3; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:33%3Bexp-session$_st:1463343349589$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463341549710; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000x17RlFxXm1xo2YlLyxY17AE:16k88d5ij; WC_PERSISTENT=Is7gXXsFgHmSFvHi0Tn86ltpFR8%3d%0a%3b 2016%2d05%2d15+15%3a44%3a07%2e959%5f1463337006085% 2d466833%5f10253%5f325249694%2c%2d3%2cEUR%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=0; shopCatIds=136865092-SRCH_136865314-TSV; cmSearchKeyword=136865092-_136865314-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; username=regina+uibel; cmCustomerId=97537166; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; qvcBoxCustData=%7B%22config%22%3A%22%22%2C%22custo merid%22%3A%2297537166%22%2C%22customergender%22%3 A%22Frau%22%2C%22customerfirstname%22%3A%22Regina% 22%2C%22customerlastname%22%3A%22Uibel%22%2C%22cus tomeremail%22%3A%[email protected]%22%2C%22customerphone%22%3A%22-%22%7D; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463341793~id=cef91852389b6dd841acaf92e0 e3cf82; sc=TSV; WC_AUTHENTICATION_-1002=%2d1002%2cKTi2zn7kXLPNWkKUWFtJyHwnmw8%3d; WC_USERACTIVITY_325249694=325249694%2c10253%2cnull %2cnull%2cnull%2cnull%2cnull%2cnull%2cnull%2cnull% 2caM%2briMYMfeNESlB2L9XuGOJqTqNpW46RwYwHQWz41GJxv2 Txs6ORuG%2bjuG3fxO9rr90eW89vkwHJ%0aVm51odwJP4jFHQP Ktz1tvMNxZBZuosQUn8MfsnwuBydcuMwOhCp081Y%2bRMinHbh 06K%2fd7PsFMQ%3d%3d; _gat=1; WC_AUTHENTICATION_325249694=325249694%2cTVdifds03E bQNjJ6%2f2GNH8xONKY%3d; _gali=pwdShow; [email protected]
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/webapp/wcs/stores/servlet/LogonForm?storeId=10253&URL=OrderStatus%3FstoreId% 3D10253%26langId%3D-3%26catalogId%3D10153&langId=-3&catalogId=10153&krypto=JeuX%2BVEXYJB2VpJqM5V0LA% 3D%3D&ddkey=http:OrderStatus
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987
POST data:
storeId=10253
catalogId=10153
langId=-3
URL=OrderStatus%3FstoreId%3D10253%26langId%3D-3%26catalogId%3D10153
reLogonURL=LogonForm
rememberMe=true
bvauthenticateuser=
bvdisplaycode=
bvcategoryid=
bvproductid=
bvcontenttype=
bvpage=
bvappcode=
logonId=regina.uibel%40t-online.de
qvcCustomerSelect=on
logonPassword=Kocharena1236987
userPrefs=
csrfToken=eGlmVTBNZmZaTjlhdHQ0SVI3ZEw1dkJTUU40cXE5 SGVaZ3lxZmxheVZxaz0%3D
========================================
Локальное время:15.05.2016 21:47:15
Время сессии: 02:22:57
Время отчета: 15.05.2016 19:49:03
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/webapp/wcs/stores/servlet/OrderStatus?storeId=10253&catalogId=10153&langId=-3
Тип: HTTPS запрос
Размер (байты): 4 857
----------------------------------------
https://www.qvc.de/webapp/wcs/stores/servlet/OrderStatus?storeId=10253&catalogId=10153&langId=-3
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: __storejs__=%22__storejs__%22; x6rproductList5=%5B%22NUTRITION%20MIXER%20f%C3%BCr %20Power-Drinks%202%20Klingen%20diverse%20Beh%C3%A4lter%20u nd%20Deckel%22%5D; x6rorderId1=%22155130227%22; x6rorderVal2=%2234%2C45%22; x6rcurrency3=%22%E2%82%AC%22; kwktoken=1; akaau=1463341862~id=49b626716fedc358f2a83359a13bac 46; akaau_geo=1463341643~id=bd4394c3cdaabacf37b8a6c0fc 29e5f3; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:34%3Bexp-session$_st:1463343420070$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463341621488; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000YefCafJXfi_xKgOQ87Eutci:16k88d5ij; WC_PERSISTENT=LAbfwA%2fmRLUKyKYjswJLZTutNBg%3d%0a% 3b2016%2d05%2d15+15%3a46%3a02%2e392%5f146333700608 5%2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f1025 3; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=0; shopCatIds=136865092-SRCH_136865314-TSV; cmSearchKeyword=136865092-_136865314-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; username=Regina+Uibel; cmCustomerId=97537166; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; qvcBoxCustData=%7B%22config%22%3A%22%22%2C%22custo merid%22%3A%2297537166%22%2C%22customergender%22%3 A%22Frau%22%2C%22customerfirstname%22%3A%22Regina% 22%2C%22customerlastname%22%3A%22Uibel%22%2C%22cus tomeremail%22%3A%[email protected]%22%2C%22customerphone%22%3A%22-%22%7D; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463341863~id=65130f14029fdeaef5d7bc0754 5af690; sc=TSV; WC_AUTHENTICATION_-1002=%2d1002%2cKTi2zn7kXLPNWkKUWFtJyHwnmw8%3d; _gat=1; _gali=btnSearch; [email protected]; cmReg=97537166; lastLogin=1; WC_USERACTIVITY_325226428=325226428%2c10253%2cnull %2cnull%2c1463341562393%2c1463343362393%2cnull%2cn ull%2cnull%2cnull%2csIXL8UoA7gBugz8Ln%2bVpU8kLZ5HN i4xKUSH0W9Zy8qgcJsXQSr%2bkPsZ0muVYKLYp1aRIMqVoy83I %0axcvQzPyydPsj%2bX47guOLlCPma94n8figN6iJetEU4rrNK 1aUWU0f%2fxuQsl33w2vzvvwgEOcXb1yn%0aaIQSj5zPqOJ2w8 %2bIvQQ%3d
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/webapp/wcs/stores/servlet/OrderStatusView?bvproductid=&storeId=10253&langId=-3&catalogId=10153&bvpage=&bvcontenttype=&bvdisplay code=&bvappcode=&bvauthenticateuser=&krypto=kqU3by ZZ8dmSB4XAuYzYiF%2Br7dHIpI%2F04Zlwuu%2FgYEDkDqNMSC CrabVrPpe18FZOTAfDFgvTdWkt%0AiIIZ1f82%2F2EMCE25B4x KWhX53q6%2FnGEED1S8bVmo%2F7ZYrz3MAt4O7ekDP8AeZM4zb UcQDJRiBaLJ%0AzN7l%2B2BnWAjgX5L2kCvqVcY9SBI%2F2j7k 4egvTQur0c91ckaCuMhHxlkUwI6B%2B3LH%2Fio1qyfhVEwI%0 AombeRKbPF8O2N9jKstR9E5U8vzrs5gUZ8JqFtX1ulD5hONYYw UA%2BTmId0Ttjkl6wVatN3UHVZZdY%0AZM%2Btbq6cTGmFBTvE %2F1qJo7OFKCN3KE2y5aC1tu6t7EwBHUZdLnPqU3viTZU%3D&d dkey=https:LogonDE
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987
POST data:
radFilter=10
itemNumber=
orderNumber=
pagecounter=1
filtertype=0
invoiceNumber=
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 21:52:46
Время сессии: 02:28:27
Время отчета: 15.05.2016 19:52:03
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: http://www.qvc.de/AddToCart?orderItemId_1=136865314&langId=-3&storeId=10253&catalogId=10153&quantity_1=0&order Id=79062335&move2List=Y&URL=OrderItemDisplay
Тип: HTTP запрос
Размер (байты): 3 739
----------------------------------------
http://www.qvc.de/AddToCart?orderItemId_1=136865314&langId=-3&storeId=10253&catalogId=10153&quantity_1=0&order Id=79062335&move2List=Y&URL=OrderItemDisplay
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463342180~id=33d5b1c7d4836be149494e30ba269c fc; akaau_geo=1463342144~id=de14f77681a13665a23c4b958e d72b2d; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:38%3Bexp-session$_st:1463343734925$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463341935285; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000YefCafJXfi_xKgOQ87Eutci:16k88d5ij; WC_PERSISTENT=LAbfwA%2fmRLUKyKYjswJLZTutNBg%3d%0a% 3b2016%2d05%2d15+15%3a46%3a02%2e392%5f146333700608 5%2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f1025 3; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV; cmSearchKeyword=136865092-_136865314-; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463341882~id=c223e117c6ff1763bd0370f117 0fdae1; sc=TSV; _gat=1; lastLogin=1; WC_USERACTIVITY_325226428=325226428%2c10253%2cnull %2cnull%2c1463341562393%2c1463343678681%2cnull%2cn ull%2cnull%2cnull%2csIXL8UoA7gBugz8Ln%2bVpU8kLZ5HN i4xKUSH0W9Zy8qgcJsXQSr%2bkPg%2fWMaYLV9SPavF%2f1aCW OLGR%0a3d999FDCaY4k19s8e5JZsc6OmQNSYSBM3M%2bkPBfiI 1ZmkB%2fjtjEbptIqtxxZ5KWhJ8MEtpA3RDbg%0a0swEXvn7Ke i4eeYvHrk%3d; _gali=ShopCartForm
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.qvc.de/webapp/wcs/stores/servlet/OrderItemDisplay?errorGlobalRsnCodes=100&orderId=. &errorGlobalMsgKeys=_ERR_ORDER_OUTOFSTOCK&catalogI d=10153&productId=13324452&errorGlobalMsgParams=87 1215+GR+00&catEntryId=13327094&updatePrices=1&stor eId=10253&calculationUsageId=-1&ddkey=https:OrderStatus
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987
POST data:
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 21:57:05
Время сессии: 02:32:47
Время отчета: 15.05.2016 19:56:34
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: http://www.qvc.de/webapp/wcs/stores/servlet/AddToCart
Тип: HTTP запрос
Размер (байты): 4 328
----------------------------------------
http://www.qvc.de/webapp/wcs/stores/servlet/AddToCart
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: __storejs__=%22__storejs__%22; x6rproductList5=%5B%22NUTRITION%20MIXER%20f%C3%BCr %20Power-Drinks%202%20Klingen%20diverse%20Beh%C3%A4lter%20u nd%20Deckel%22%5D; kwktoken=1; akaau=1463342455~id=b047b5b3154783732281d26f62aa2d b5; akaau_geo=1463342262~id=eaf08479f4c585ba5d0a14425e 215296; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:43%3Bexp-session$_st:1463344012004$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463342211393; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000YefCafJXfi_xKgOQ87Eutci:16k88d5ij; WC_PERSISTENT=LAbfwA%2fmRLUKyKYjswJLZTutNBg%3d%0a% 3b2016%2d05%2d15+15%3a46%3a02%2e392%5f146333700608 5%2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f1025 3; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=0; shopCatIds=136865092-SRCH_136865314-TSV; cmSearchKeyword=136865092-_136865314-; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463341882~id=c223e117c6ff1763bd0370f117 0fdae1; sc=TSV; lastLogin=1; WC_USERACTIVITY_325226428=325226428%2c10253%2cnull %2cnull%2c1463341562393%2c1463343954964%2cnull%2cn ull%2cnull%2cnull%2csIXL8UoA7gBugz8Ln%2bVpU8kLZ5HN i4xKUSH0W9Zy8qgcJsXQSr%2bkPvVzb927en0fchgS%2bts7Dv SB%0aCY7i6SX9e69c%2bhLlHdjiIqa900%2bBaNPdqOx8r7O4t T7%2bRFu2OPV43STc%2fBZpDm2ujmihaqAq7tgy%0aEngU63ao RUfjf%2bOzUyw%3d; _gat=1
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.qvc.de/webapp/wcs/stores/servlet/InterPageView?orderId=.&storeId=10253&colorCode=GN &URL=OrderItemDisplay%3FupdatePrices%3D1%26calcula tionUsageId%3D-1%26orderId%3D.&itemNumber=871215&quantity=1&langI d=-3&catalogId=10153&productNumber=871215&productId=1 3324452&sizeCode=000&ats=UK&sc=TSV&catEntryId=1332 7093&state=SW&ipValue=&errorViewName=ProdNotFoundV iew&catentryResolver=nonTechnicalKey&ddkey=http:Ad dToCart
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987
POST data:
orderId=.
storeId=10253
colorCode=GN
itemNumber=871215
quantity=1
langId=-3
catalogId=10153
viewTaskName=InterPageView
productNumber=871215
productId=13324452
sizeCode=000
ats=WL
URL=OrderItemDisplay%3FupdatePrices%3D1%26calculat ionUsageId%3D-1%26orderId%3D.%26productId%3D13324452%26catEntryI d%3D13324452
sc=TSV
catEntryId=13327093
state=SW
ipValue=
errorViewName=ProdNotFoundView
catentryResolver=nonTechnicalKey
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 21:57:25
Время сессии: 02:33:06
Время отчета: 15.05.2016 19:56:34
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: http://www.qvc.de/QVCReauthenticateCmd?storeId=10253&catalogId=10153 &langId=-3&orderId=79062335&errorURL=InvalidInputErrorView& fromPage=checkout&destination=https://www.qvc.de/DEAddALineCheck?orderId=79062335&toOrderId=7906233 5&rememberUserName=&destination2=http://www.qvc.de/OrderItemDisplay?storeId=10253&catalogId=10153&ord erId=79062335&rememberMe=true
Тип: HTTP запрос
Размер (байты): 3 905
----------------------------------------
http://www.qvc.de/QVCReauthenticateCmd?storeId=10253&catalogId=10153 &langId=-3&orderId=79062335&errorURL=InvalidInputErrorView& fromPage=checkout&destination=https://www.qvc.de/DEAddALineCheck?orderId=79062335&toOrderId=7906233 5&rememberUserName=&destination2=http://www.qvc.de/OrderItemDisplay?storeId=10253&catalogId=10153&ord erId=79062335&rememberMe=true
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463342471~id=ecd2e0a9814476a9f6dd1fe4c3269f 92; akaau_geo=1463342262~id=eaf08479f4c585ba5d0a14425e 215296; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:44%3Bexp-session$_st:1463344028539$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463342228954; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000YefCafJXfi_xKgOQ87Eutci:16k88d5ij; WC_PERSISTENT=LAbfwA%2fmRLUKyKYjswJLZTutNBg%3d%0a% 3b2016%2d05%2d15+15%3a46%3a02%2e392%5f146333700608 5%2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f1025 3; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV_136865391-TSV; cmSearchKeyword=136865092-_136865314-_136865391-; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463341882~id=c223e117c6ff1763bd0370f117 0fdae1; sc=TSV; lastLogin=1; WC_USERACTIVITY_325226428=325226428%2c10253%2cnull %2cnull%2c1463341562393%2c1463343954964%2cnull%2cn ull%2cnull%2cnull%2csIXL8UoA7gBugz8Ln%2bVpU8kLZ5HN i4xKUSH0W9Zy8qgcJsXQSr%2bkPvVzb927en0fchgS%2bts7Dv SB%0aCY7i6SX9e69c%2bhLlHdjiIqa900%2bBaNPdqOx8r7O4t T7%2bRFu2OPV43STc%2fBZpDm2ujmihaqAq7tgy%0aEngU63ao RUfjf%2bOzUyw%3d; _gat=1; _gali=frmIntermediateConfirmation
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.qvc.de/webapp/wcs/stores/servlet/OrderItemDisplay?orderId=.&catalogId=10153&product Id=13324452&orderItemId=136865391&catEntryId=13324 452&updatePrices=1&storeId=10253&calculationUsageI d=-1&ddkey=http:AddToCart
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987
POST data:
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 21:57:57
Время сессии: 02:33:39
Время отчета: 15.05.2016 19:59:34
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/Logon
Тип: HTTPS запрос
Размер (байты): 5 073
----------------------------------------
https://www.qvc.de/Logon
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463342492~id=8229cdc32cd8060d01f9f83ed7d621 a0; akaau_geo=1463342262~id=eaf08479f4c585ba5d0a14425e 215296; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:45%3Bexp-session$_st:1463344048078$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463342248165; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000YefCafJXfi_xKgOQ87Eutci:16k88d5ij; WC_PERSISTENT=LAbfwA%2fmRLUKyKYjswJLZTutNBg%3d%0a% 3b2016%2d05%2d15+15%3a46%3a02%2e392%5f146333700608 5%2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f1025 3; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV_136865391-TSV; cmSearchKeyword=136865092-_136865314-_136865391-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; username=Regina+Uibel; cmCustomerId=97537166; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; qvcBoxCustData=%7B%22config%22%3A%22%22%2C%22custo merid%22%3A%2297537166%22%2C%22customergender%22%3 A%22Frau%22%2C%22customerfirstname%22%3A%22Regina% 22%2C%22customerlastname%22%3A%22Uibel%22%2C%22cus tomeremail%22%3A%[email protected]%22%2C%22customerphone%22%3A%22-%22%7D; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463341882~id=c223e117c6ff1763bd0370f117 0fdae1; sc=TSV; WC_AUTHENTICATION_-1002=%2d1002%2cKTi2zn7kXLPNWkKUWFtJyHwnmw8%3d; [email protected]; lastLogin=1; _gat=1; _gali=pwdShow
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/DEAddALineCheck?toOrderId=79062335&fromPage=checko ut&orderId=79062335&catalogId=10153&catalogId=1015 3&destination2=http%3A%2F%2Fwww.qvc.de%2FOrderItem Display%3FstoreId%3D10253&errorViewName=InvalidInp utErrorView&csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJ cW1ScWRheVpZODRWaUpWM0V3K1ZUND0%3D&rememberUserNam e=&langId=-3&destination=https%3A%2F%2Fwww.qvc.de%2FDEAddALin eCheck%3ForderId%3D79062335&errorURL=InvalidInputE rrorView&storeId=10253&rememberMe=true
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987 Kocharena1236987
POST data:
storeId=10253
catalogId=10153
langId=-3
URL=%2Fwebapp%2Fwcs%2Fstores%2Fservlet%2FDEAddALin eCheck%3FstoreId%3D10253%26langId%3D-3%26catalogId%3D10153%26catalogId%3D10153%26krypto %3DeDG4gfCkuHZqcnAODhlH8t8F%252Fjxrfmps%252FzF26bW 4XhlrxsjNNdDxNr1XK7GUvsdLFgTjyfRw6iyO%250A7K0Zv56r sf8FYNCvOZfSLxbGVGYLMuKI0cPX3k7W9IzTHSdNpwIehx%252 BXDm%252B01zRDNulo9v9AUIHR%250AcRYi3qaS%252Fz9qMCI LWR2OhAU0WiAoUSRVKYWx%252FBkaN%252BNlu8btB%252FV%2 52FO%252BfumV5yVVYeH%252FEdBmg86%252B7e%250ApC%252 Bj9GNVEY0iyZBdkuDsd2F%252B47lRL8KPByAMbUS4HAiubz8C n8F1073pc4f21ikzUtA2iQsmhTqV%250Am9XeH8kZAEflwXXTn TVhp2DKVlLlAgujwtQI6YaRTVNa0hPJbJHO4gQJ2aoEaFtzHRB 2OFygcNPE%250AQbU1xhNi8Icg8wdm9ioUKUeCik9ZxcZeOpeP o%252BxMSNB5JunfkOj%252BHYXzsWAMzSef1iyvTKM%252Fq4 HL%250AjdM8hA2h1AoIb1XsfMAFkVF9vs5gcInWP1kKfs8RlST twxN1HebH0zzcDHN%252FBvQ1UlQ5elxgOF%252F1%250Ah6Bf GeJRD0xU8rUVTBzd2OM%253D
reLogonURL=LogonForm
rememberMe=true
fromPage=checkout
logonId=regina.uibel%40t-online.de
qvcCustomerSelect=on
logonPassword=Kocharena1236987
speedBuyTypeInd=C
orderId=79062335
cbReviewOrderTotal=
userPrefs=
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 22:00:46
Время сессии: 02:36:27
Время отчета: 15.05.2016 20:02:35
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/ForgotPassword?storeId=10253&catalogId=10153&langI d=-3
Тип: HTTPS запрос
Размер (байты): 4 051
----------------------------------------
https://www.qvc.de/ForgotPassword?storeId=10253&catalogId=10153&langI d=-3
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463342667~id=35d9258f284ba62daefeee7e22652a 49; akaau_geo=1463342262~id=eaf08479f4c585ba5d0a14425e 215296; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:47%3Bexp-session$_st:1463344131777$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463342332119; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000BE391fG9eXZvFjidLfGyj93:16k88d5ij; WC_PERSISTENT=LAbfwA%2fmRLUKyKYjswJLZTutNBg%3d%0a% 3b2016%2d05%2d15+15%3a46%3a02%2e392%5f146333700608 5%2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f1025 3; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV_136865391-TSV; cmSearchKeyword=136865092-_136865314-_136865391-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; username=Regina+Uibel; cmCustomerId=97537166; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; qvcBoxCustData=%7B%22config%22%3A%22%22%2C%22custo merid%22%3A%2297537166%22%2C%22customergender%22%3 A%22Frau%22%2C%22customerfirstname%22%3A%22Regina% 22%2C%22customerlastname%22%3A%22Uibel%22%2C%22cus tomeremail%22%3A%[email protected]%22%2C%22customerphone%22%3A%22-%22%7D; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463341882~id=c223e117c6ff1763bd0370f117 0fdae1; sc=TSV; WC_AUTHENTICATION_-1002=%2d1002%2cKTi2zn7kXLPNWkKUWFtJyHwnmw8%3d; [email protected]; lastLogin=1; _gat=1; _gali=btnContinue; qvcResetPW=80255029%7C0
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/ForgotPasswordForm?langId=-3&storeId=10253&catalogId=10153&emailAddress=lotha [email protected]
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987 Kocharena1236987 Lothar<<<<<<r<lothar 802 550 29<<
POST data:
URL=ForgotPasswordConfirm
ERR_URL=ForgotPasswordForm
resetEmailType=Password
answer1=1948-08-01
questionID1=25
defQuestionType1=WEBDEF
defAnswerType1=BDAY
emailAddress=
customerNumber=80255029
logonId=80255029
txtLogonIdStep2=80255029
day=01
month=08
year=1948
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 22:06:39
Время сессии: 02:42:21
Время отчета: 15.05.2016 20:06:05
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: http://www.qvc.de/QVCReauthenticateCmd?storeId=10253&catalogId=10153 &langId=-3&orderId=79062335&errorURL=InvalidInputErrorView& fromPage=checkout&destination=https://www.qvc.de/DEAddALineCheck?orderId=79062335&toOrderId=7906233 5&rememberUserName=&destination2=http://www.qvc.de/OrderItemDisplay?storeId=10253&catalogId=10153&ord erId=79062335&rememberMe=true
Тип: HTTP запрос
Размер (байты): 3 723
----------------------------------------
http://www.qvc.de/QVCReauthenticateCmd?storeId=10253&catalogId=10153 &langId=-3&orderId=79062335&errorURL=InvalidInputErrorView& fromPage=checkout&destination=https://www.qvc.de/DEAddALineCheck?orderId=79062335&toOrderId=7906233 5&rememberUserName=&destination2=http://www.qvc.de/OrderItemDisplay?storeId=10253&catalogId=10153&ord erId=79062335&rememberMe=true
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463343022~id=a2bd0d67b1f46286883ef98577feea 89; akaau_geo=1463342904~id=8e3fd2d69b656dfa7e4d6f84c9 802a3a; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:52%3Bexp-session$_st:1463344579832$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463342780207; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000BE391fG9eXZvFjidLfGyj93:16k88d5ij; WC_PERSISTENT=LAbfwA%2fmRLUKyKYjswJLZTutNBg%3d%0a% 3b2016%2d05%2d15+15%3a46%3a02%2e392%5f146333700608 5%2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f1025 3; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV_136865391-TSV; cmSearchKeyword=136865092-_136865314-_136865391-; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463342783~id=436d153413be3db8a64ad5b5f7 7910df; sc=TSV; lastLogin=1; _gat=1; qvcResetPW=80255029%7C1
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.qvc.de/webapp/wcs/stores/servlet/OrderItemDisplay?errorGlobalRsnCodes=100&orderId=. &errorGlobalMsgKeys=_ERR_ORDER_OUTOFSTOCK&catalogI d=10153&productId=13324452&errorGlobalMsgParams=87 1215+GN+00&catEntryId=13327093&updatePrices=1&stor eId=10253&calculationUsageId=-1&ddkey=http:AddToCart
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987 Kocharena1236987 Lothar<<<<<<r<lothar 802 550 29<<
POST data:
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 22:17:34
Время сессии: 02:53:16
Время отчета: 15.05.2016 20:17:06
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: http://www.qvc.de/QVCReauthenticateCmd?storeId=10253&catalogId=10153 &langId=-3&orderId=79062335&errorURL=InvalidInputErrorView& fromPage=checkout&destination=https://www.qvc.de/DEAddALineCheck?orderId=79062335&toOrderId=7906233 5&rememberUserName=&destination2=http://www.qvc.de/OrderItemDisplay?storeId=10253&catalogId=10153&ord erId=79062335&rememberMe=true
Тип: HTTP запрос
Размер (байты): 3 526
----------------------------------------
http://www.qvc.de/QVCReauthenticateCmd?storeId=10253&catalogId=10153 &langId=-3&orderId=79062335&errorURL=InvalidInputErrorView& fromPage=checkout&destination=https://www.qvc.de/DEAddALineCheck?orderId=79062335&toOrderId=7906233 5&rememberUserName=&destination2=http://www.qvc.de/OrderItemDisplay?storeId=10253&catalogId=10153&ord erId=79062335&rememberMe=true
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463343690~id=d036c414418f5afb33943fadcb20fe b7; akaau_geo=1463342904~id=8e3fd2d69b656dfa7e4d6f84c9 802a3a; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:55%3Bexp-session$_st:1463345245923$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463343446274; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000BE391fG9eXZvFjidLfGyj93:16k88d5ij; WC_PERSISTENT=LAbfwA%2fmRLUKyKYjswJLZTutNBg%3d%0a% 3b2016%2d05%2d15+15%3a46%3a02%2e392%5f146333700608 5%2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f1025 3; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV_136865391-TSV; cmSearchKeyword=136865092-_136865314-_136865391-; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463342783~id=436d153413be3db8a64ad5b5f7 7910df; sc=TSV; lastLogin=1; qvcResetPW=80255029%7C1; _gat=1; _gali=ancCart
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.qvc.de/OrderItemDisplay?orderId=.&langId=-3&storeId=10253&catalogId=10153
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987 Kocharena1236987 Lothar<<<<<<r<lothar 802 550 29<<
POST data:
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 22:18:07
Время сессии: 02:53:48
Время отчета: 15.05.2016 20:20:06
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/Logon
Тип: HTTPS запрос
Размер (байты): 5 150
----------------------------------------
https://www.qvc.de/Logon
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: akaau=1463343702~id=42845a5830104cc3598a27bc31fb9d ed; akaau_geo=1463342904~id=8e3fd2d69b656dfa7e4d6f84c9 802a3a; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=UmVnaW5h; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:56%3Bexp-session$_st:1463345257226$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463343457337; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000BE391fG9eXZvFjidLfGyj93:16k88d5ij; WC_PERSISTENT=LAbfwA%2fmRLUKyKYjswJLZTutNBg%3d%0a% 3b2016%2d05%2d15+15%3a46%3a02%2e392%5f146333700608 5%2d466833%5f10253%5f325226428%2c%2d3%2cEUR%5f1025 3; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV_136865391-TSV; cmSearchKeyword=136865092-_136865314-_136865391-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=10; cmCheckoutReg=true; qvcauthenticed=true; username=Regina+Uibel; cmCustomerId=97537166; bvqauser=2b8582eed221db5b3505c6b7cd000498646174653 d3230313630353135267573657269643d3937353337313636; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; qvcBoxCustData=%7B%22config%22%3A%22%22%2C%22custo merid%22%3A%2297537166%22%2C%22customergender%22%3 A%22Frau%22%2C%22customerfirstname%22%3A%22Regina% 22%2C%22customerlastname%22%3A%22Uibel%22%2C%22cus tomeremail%22%3A%[email protected]%22%2C%22customerphone%22%3A%22-%22%7D; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463342783~id=436d153413be3db8a64ad5b5f7 7910df; sc=TSV; WC_AUTHENTICATION_-1002=%2d1002%2cKTi2zn7kXLPNWkKUWFtJyHwnmw8%3d; [email protected]; lastLogin=1; qvcResetPW=80255029%7C1; _gat=1; _gali=pwdShow
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/DEAddALineCheck?toOrderId=79062335&fromPage=checko ut&orderId=79062335&catalogId=10153&catalogId=1015 3&destination2=http%3A%2F%2Fwww.qvc.de%2FOrderItem Display%3FstoreId%3D10253&errorViewName=InvalidInp utErrorView&csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJ cW1ScWRheVpZODRWaUpWM0V3K1ZUND0%3D&rememberUserNam e=&langId=-3&destination=https%3A%2F%2Fwww.qvc.de%2FDEAddALin eCheck%3ForderId%3D79062335&errorURL=InvalidInputE rrorView&storeId=10253&rememberMe=true
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987 Kocharena1236987 Lothar<<<<<<r<lothar 802 550 29<< lothar 1301
POST data:
storeId=10253
catalogId=10153
langId=-3
URL=%2Fwebapp%2Fwcs%2Fstores%2Fservlet%2FDEAddALin eCheck%3FstoreId%3D10253%26langId%3D-3%26catalogId%3D10153%26catalogId%3D10153%26krypto %3DeDG4gfCkuHZqcnAODhlH8t8F%252Fjxrfmps%252FzF26bW 4XhlrxsjNNdDxNr1XK7GUvsdLFgTjyfRw6iyO%250A7K0Zv56r sf8FYNCvOZfSLxbGVGYLMuKI0cPX3k7W9IzTHSdNpwIehx%252 BXDm%252B01zRDNulo9v9AUIHR%250AcRYi3qaS%252Fz9qMCI LWR2OhAU0WiAoUSRVKYWx%252FBkaN%252BNlu8btB%252FV%2 52FO%252BfumV5yVVYeH%252FEdBmg86%252B7e%250ApC%252 Bj9GNVEY0iyZBdkuDsd2F%252B47lRL8KPByAMbUS4HAiubz8C n8F1073pc4f21ikzUtA2iQsmhTqV%250Am9XeH8kZAEflwXXTn TVhp2DKVlLlAgujwtQI6YaRTVNa0hPJbJHO4gQJ2aoEaFtzHRB 2OFygcNPE%250AQbU1xhNi8Icg8wdm9ioUKUeCik9ZxcZeOpeP o%252BxMSNB5JunfkOj%252BHYXzsWAMzSef1iyvTKM%252Fq4 HL%250AjdM8hA2h1AoIb1XsfMAFkVF9vs5gcInWP1kKfs8RlST twxN1HebH0zzcDHN%252FBvQ1UlQ5elxgOF%252F1%250Ah6Bf GeJRD0xU8rUVTBzd2OM%253D
reLogonURL=LogonForm
rememberMe=true
fromPage=checkout
logonId=lothar.uibel%40t-online.de
qvcCustomerSelect=on
logonPassword=1301
speedBuyTypeInd=C
orderId=79062335
cbReviewOrderTotal=
userPrefs=
csrfToken=c0hvWkdDU01GUVhpSUZTam52bFdJcW1ScWRheVpZ ODRWaUpWM0V3K1ZUND0%3D
========================================
Локальное время:15.05.2016 22:21:00
Время сессии: 02:56:41
Время отчета: 15.05.2016 20:20:07
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/webapp/wcs/stores/servlet/SetupPassword
Тип: HTTPS запрос
Размер (байты): 6 822
----------------------------------------
https://www.qvc.de/webapp/wcs/stores/servlet/SetupPassword
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: __storejs__=%22__storejs__%22; x6rproductList5=%5B%22NUTRITION%20MIXER%20f%C3%BCr %20Power-Drinks%202%20Klingen%20diverse%20Beh%C3%A4lter%20u nd%20Deckel%22%5D; kwktoken=1; akaau=1463343741~id=4063ab3b0b707ed2b2cc79fb9ae840 bb; akaau_geo=1463342904~id=8e3fd2d69b656dfa7e4d6f84c9 802a3a; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=TG90aGFy; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:57%3Bexp-session$_st:1463345296587$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463343497050; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000hbgqk7O6jbJfEI3yROIfe1Q:16k88d5ij; WC_PERSISTENT=KIbfFnjODj0S03jZ%2f3oBBYxDPFY%3d%0a% 3b2016%2d05%2d15+16%3a17%3a14%2e338%5f146334343433 7%2d99%5f10253%5f325249821%2c%2d3%2cEUR%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV_136865391-TSV; cmSearchKeyword=136865092-_136865314-_136865391-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=01; cmCheckoutReg=true; cmCustomerId=80255029; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; qvcBoxCustData=%7B%22config%22%3A%22%22%2C%22custo merid%22%3A%2297537166%22%2C%22customergender%22%3 A%22Frau%22%2C%22customerfirstname%22%3A%22Regina% 22%2C%22customerlastname%22%3A%22Uibel%22%2C%22cus tomeremail%22%3A%[email protected]%22%2C%22customerphone%22%3A%22-%22%7D; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463342783~id=436d153413be3db8a64ad5b5f7 7910df; sc=TSV; WC_AUTHENTICATION_-1002=%2d1002%2cKTi2zn7kXLPNWkKUWFtJyHwnmw8%3d; [email protected]; lastLogin=1; qvcResetPW=80255029%7C1; _gat=1; cmReg=80255029; qvcauthenticed=true; username=Lothar+Uibel; bvqauser=9de170e61cd7058c32df39c5d9c2fd54646174653 d3230313630353135267573657269643d3830323535303239; WC_AUTHENTICATION_325249821=325249821%2czBjPJEnU6h miBSq47In8UAlEABs%3d; WC_USERACTIVITY_325249821=325249821%2c10253%2cnull %2cnull%2c1463343434340%2c1463345234340%2cnull%2cn ull%2cnull%2cnull%2cQZ0Kr7aoMP7633WIi%2bkcoicw%2f6 qN1mfarLlbPc12D1nrbosmLYtswWeQmZr81jbz2%2fqi2fQxBV %2bb%0amrEsS41FcEq72QzNIr5pyyelscluaDxNSOorj0FWGhy B3sCazCwKlL3NZPP4gqNpIQSPJMcbQnR%2f%0aqLDO00mwjDRY R%2bkbL00%3d; _gali=btnContinue
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/webapp/wcs/stores/servlet/SetupPasswordForm?storeId=10253&URL=%2Fwebapp%2Fwc s%2Fstores%2Fservlet%2FDEAddALineCheck%3FstoreId%3 D10253%26langId%3D-3%26catalogId%3D10153%26catalogId%3D10153%26krypto %3DeDG4gfCkuHZqcnAODhlH8t8F%252Fjxrfmps%252FzF26bW 4XhlrxsjNNdDxNr1XK7GUvsdLFgTjyfRw6iyO%250A7K0Zv56r sf8FYNCvOZfSLxbGVGYLMuKI0cPX3k7W9IzTHSdNpwIehx%252 BXDm%252B01zRDNulo9v9AUIHR%250AcRYi3qaS%252Fz9qMCI LWR2OhAU0WiAoUSRVKYWx%252FBkaN%252BNlu8btB%252FV%2 52FO%252BfumV5yVVYeH%252FEdBmg86%252B7e%250ApC%252 Bj9GNVEY0iyZBdkuDsd2F%252B47lRL8KPByAMbUS4HAiubz8C n8F1073pc4f21ikzUtA2iQsmhTqV%250Am9XeH8kZAEflwXXTn TVhp2DKVlLlAgujwtQI6YaRTVNa0hPJbJHO4gQJ2aoEaFtzHRB 2OFygcNPE%250AQbU1xhNi8Icg8wdm9ioUKUeCik9ZxcZeOpeP o%252BxMSNB5JunfkOj%252BHYXzsWAMzSef1iyvTKM%252Fq4 HL%250AjdM8hA2h1AoIb1XsfMAFkVF9vs5gcInWP1kKfs8RlST twxN1HebH0zzcDHN%252FBvQ1UlQ5elxgOF%252F1%250Ah6Bf GeJRD0xU8rUVTBzd2OM%253D&langId=-3&catalogId=10153&krypto=KB1%2BUOhKInbeCsxxPjAePh6 fQFF8fMdvB8Akd0MEj1Tknm7F5D2Vo9Cgf%2BhpGzjJqL5Ii7p EiZB7%0AjAH8pD5DlGvsr4xVp50tLh%2FaEHcsCfyda4theWVZ fj8fzJgpxFv6QMSCr9OXivUjAuV1tpvbTj9w%0A7dBhrAgRZOy LD%2BBquJPpP%2B5rQ1OtP%2FtJIwe4M64b5RoA25%2BxZW0ZC GYita46s6MbAnJFaA8A0bs%2F%0A7sA2LH5PYyHpRXSZB04Jkb DMUMtUqdloZLyIwTtSzJND%2FBPtCOf5ilqECnBBPrOIMOtx2T yu%2Bv9K%0AgCxiu6Vl%2BZ8d8bBC2SMg%2ByTcb10NRNO8Tj9 JN3XPn6E%2BHsC6EMKsJshXg7qcZYWarUhHaWozNo%2Fp%0As1 9K5Wtv9V%2F8UFFKT5GvHipQPxCKUoERjC72ILgJh0myKSn6D2 k1CMXKiA%3D%3D&ddkey=http:InterestItemDisplay
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987 Kocharena1236987 Lothar<<<<<<r<lothar 802 550 29<< lothar 1301 Lowe!"§$%&Lowe!"§$%& 1301 1236987 Lowe1236987 Lowe1236987 Lowe1236987 Lowe1236987
POST data:
logonId=lothar.uibel%40t-online.de
newPassword=L%C3%B6we1236987
confirmNewPassword=L%C3%B6we1236987
ERR_URL=SetupPasswordForm
PAGE_AFTER_SETUP_PWD=%2Fwebapp%2Fwcs%2Fstores%2Fse rvlet%2FDEAddALineCheck%3FstoreId%3D10253%26langId %3D-3%26catalogId%3D10153%26catalogId%3D10153%26krypto %3DeDG4gfCkuHZqcnAODhlH8t8F%252Fjxrfmps%252FzF26bW 4XhlrxsjNNdDxNr1XK7GUvsdLFgTjyfRw6iyO%250A7K0Zv56r sf8FYNCvOZfSLxbGVGYLMuKI0cPX3k7W9IzTHSdNpwIehx%252 BXDm%252B01zRDNulo9v9AUIHR%250AcRYi3qaS%252Fz9qMCI LWR2OhAU0WiAoUSRVKYWx%252FBkaN%252BNlu8btB%252FV%2 52FO%252BfumV5yVVYeH%252FEdBmg86%252B7e%250ApC%252 Bj9GNVEY0iyZBdkuDsd2F%252B47lRL8KPByAMbUS4HAiubz8C n8F1073pc4f21ikzUtA2iQsmhTqV%250Am9XeH8kZAEflwXXTn TVhp2DKVlLlAgujwtQI6YaRTVNa0hPJbJHO4gQJ2aoEaFtzHRB 2OFygcNPE%250AQbU1xhNi8Icg8wdm9ioUKUeCik9ZxcZeOpeP o%252BxMSNB5JunfkOj%252BHYXzsWAMzSef1iyvTKM%252Fq4 HL%250AjdM8hA2h1AoIb1XsfMAFkVF9vs5gcInWP1kKfs8RlST twxN1HebH0zzcDHN%252FBvQ1UlQ5elxgOF%252F1%250Ah6Bf GeJRD0xU8rUVTBzd2OM%253D
orderId=79062335
IsCheckout=true
cbReviewOrderTotal=
addressId=
URL=SetupPasswordConfirmation
csrfToken=NkpmbWNmcTM0a0YvNGVFam9TNUltN3BZd1I2YlBl cFhheTM0K0FMQi9zTT0%3D
========================================
Локальное время:15.05.2016 22:21:24
Время сессии: 02:57:05
Время отчета: 15.05.2016 20:23:07
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/webapp/wcs/stores/servlet/QVCShipInfoAdd?storeId=10253&catalogId=10153&langI d=-3
Тип: HTTPS запрос
Размер (байты): 5 242
----------------------------------------
https://www.qvc.de/webapp/wcs/stores/servlet/QVCShipInfoAdd?storeId=10253&catalogId=10153&langI d=-3
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: __storejs__=%22__storejs__%22; x6rproductList5=%5B%22NUTRITION%20MIXER%20f%C3%BCr %20Power-Drinks%202%20Klingen%20diverse%20Beh%C3%A4lter%20u nd%20Deckel%22%5D; kwktoken=1; akaau=1463343917~id=2f6d7f695f5fec60d793572deff6bc 0a; akaau_geo=1463342904~id=8e3fd2d69b656dfa7e4d6f84c9 802a3a; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=TG90aGFy; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:59%3Bexp-session$_st:1463345472186$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463343672526; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000hbgqk7O6jbJfEI3yROIfe1Q:16k88d5ij; WC_PERSISTENT=KIbfFnjODj0S03jZ%2f3oBBYxDPFY%3d%0a% 3b2016%2d05%2d15+16%3a17%3a14%2e338%5f146334343433 7%2d99%5f10253%5f325249821%2c%2d3%2cEUR%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV_136865391-TSV; cmSearchKeyword=136865092-_136865314-_136865391-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=11; cmCheckoutReg=true; cmCustomerId=80255029; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; qvcBoxCustData=%7B%22config%22%3A%22%22%2C%22custo merid%22%3A%2297537166%22%2C%22customergender%22%3 A%22Frau%22%2C%22customerfirstname%22%3A%22Regina% 22%2C%22customerlastname%22%3A%22Uibel%22%2C%22cus tomeremail%22%3A%[email protected]%22%2C%22customerphone%22%3A%22-%22%7D; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463342783~id=436d153413be3db8a64ad5b5f7 7910df; sc=TSV; WC_AUTHENTICATION_-1002=%2d1002%2cKTi2zn7kXLPNWkKUWFtJyHwnmw8%3d; [email protected]; lastLogin=1; qvcResetPW=80255029%7C1; _gat=1; cmReg=80255029; qvcauthenticed=true; username=Lothar+Uibel; bvqauser=9de170e61cd7058c32df39c5d9c2fd54646174653 d3230313630353135267573657269643d3830323535303239; WC_AUTHENTICATION_325249821=325249821%2czBjPJEnU6h miBSq47In8UAlEABs%3d; WC_USERACTIVITY_325249821=325249821%2c10253%2cnull %2cnull%2c1463343434340%2c1463345405477%2cnull%2cn ull%2cnull%2cnull%2cQZ0Kr7aoMP7633WIi%2bkcoicw%2f6 qN1mfarLlbPc12D1nrbosmLYtswSOit6LgJic%2bVC3TAI617f qt%0aS830tc3SHF4tAHubUSnYrr%2bS6ofnBCBwvlcg5K1vwz4 yHKVacdxH7bEa%2b0VPKS7aBsPDI9JlcrxO%0aUcPpn3Jfkuk1 j67A9Qg%3d; _gali=btnContinueAddressBook
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/webapp/wcs/stores/servlet/SingleShippingAddressView?storeId=10253&langId=-3&catalogId=10153&catalogId=10153&krypto=FUZE9vPtg 2OC7bEjJpCqFUjkegriOHgZLeZ4luSxh4bVJnGf0W3gTGnNGYy lt863vIsqUPwO0wO3%0A7O%2FtxLqH6jzSPhCSdUQ2%2B1F0Yf RcXN7Ga%2Fg9fAHYRFcKoujhs3aAPCop36SpJMuAPHzlNr9kxT qc%0AvYUNhOso8lIxy7ELatgh%2F%2FWmGQjJOV7RsFAFap7CU PRj3u529JPZ5UXLlBtMVse9Qn%2BRXqWFOjRJ%0AKDLzWoibpq ODhYQPqoZN9%2FwWA%2FHSpQ2wEuItEGJTOXWD43SF9J6L92MJ UhHNKFVm%2FtVCszv8se%2Fr%0A0gia7ydJPGMm%2BCZTQLeS2 rbXBQQvDxyBXoCU3p0cbCYODgzTm3mZJebE7xCXCcQiOdqdA3k 7ayiP%0A4AS0iF%2FKv3BWzoATJGczYud8Ep24ZshCDWHKZ53F ee2xDEc%2BrXQZnqRXhRjMe2MDwi3akgFhjEP0%0AltdlV7zp% 2FJvKjZ6%2FefZ2riTtf75Z4C%2BC8AvwFxB7u%2FmtIJm2Sgk 3Mi1E4VS1dyOZUIGhT4t0UPN%2F%0AWohrRsO27w1vd5QRbZwo RxU%3D&ddkey=https
EAddALineCheck
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987 Kocharena1236987 Lothar<<<<<<r<lothar 802 550 29<< lothar 1301 Lowe!"§$%&Lowe!"§$%& 1301 1236987 Lowe1236987 Lowe1236987 Lowe1236987 Lowe1236987
POST data:
addressId=36436736
addressIdRad=36436736
orderId=79062335
catalogId=10153
langId=-3
csrfToken=NkpmbWNmcTM0a0YvNGVFam9TNUltN3BZd1I2YlBl cFhheTM0K0FMQi9zTT0%3D
========================================
Локальное время:15.05.2016 22:21:38
Время сессии: 02:57:20
Время отчета: 15.05.2016 20:23:08
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/webapp/wcs/stores/servlet/OrderAddPaymentMethods
Тип: HTTPS запрос
Размер (байты): 5 304
----------------------------------------
https://www.qvc.de/webapp/wcs/stores/servlet/OrderAddPaymentMethods
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: __storejs__=%22__storejs__%22; x6rproductList5=%5B%22NUTRITION%20MIXER%20f%C3%BCr %20Power-Drinks%202%20Klingen%20diverse%20Beh%C3%A4lter%20u nd%20Deckel%22%5D; kwktoken=1; akaau=1463343932~id=5a9955909dff88954ab44b055c3cb6 89; akaau_geo=1463342904~id=8e3fd2d69b656dfa7e4d6f84c9 802a3a; mt.v=2.476007966.1463336728259; curntChnl=QVC; qvcuname=TG90aGFy; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:1$_ss:0$_pn:60%3Bexp-session$_st:1463345487618$ses_id:1463336729944%3Be xp-session; cmTPSet=Y; qvcHideMasthead=1; _ga=GA1.2.2047048782.1463336732; IQVCREF=B09; PE=1463343688042; CMAVID=none; __storejs__=%22__storejs__%22; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; ak-migr-origin=true; qlastitms=871215%253B841430%253B840809; qvcpdap=true; qvcpdvol=0.9; eqsid_=1463336729944; QVCProductListDisplayPrefs=gallery%7C%7C24; dc=SP; mQL=; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~157AED3B ~|~~|~|0~1|1|0|2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; lastPLVisited=http://suche.qvc.de/QVC/Search.ff?query=Gardinen%20clicks; JSESSIONID=0000hbgqk7O6jbJfEI3yROIfe1Q:16k88d5ij; WC_PERSISTENT=KIbfFnjODj0S03jZ%2f3oBBYxDPFY%3d%0a% 3b2016%2d05%2d15+16%3a17%3a14%2e338%5f146334343433 7%2d99%5f10253%5f325249821%2c%2d3%2cEUR%5f10253; WC_SESSION_ESTABLISHED=true; WC_ACTIVEPOINTER=%2d3%2c10253; mt.cart_qty=1; shopCatIds=136865092-SRCH_136865314-TSV_136865391-TSV; cmSearchKeyword=136865092-_136865314-_136865391-; WC_AUTHENTICATION_325226428=325226428%2cxEB04vX%2f kEJW26nK0kfVmhHNII8%3d; [email protected]; olsdob=23.03.1957; olssalutation=F; authFlags=11; cmCheckoutReg=true; cmCustomerId=80255029; cmOLSOutcome=OA1; qvcCCPreVal=Exp%2COAyesCCno%2CpaidWithOA; qvcBoxCustData=%7B%22config%22%3A%22%22%2C%22custo merid%22%3A%2297537166%22%2C%22customergender%22%3 A%22Frau%22%2C%22customerfirstname%22%3A%22Regina% 22%2C%22customerlastname%22%3A%22Uibel%22%2C%22cus tomeremail%22%3A%[email protected]%22%2C%22customerphone%22%3A%22-%22%7D; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; CoreM_Ses=S1463338231393|OrderConfi|; akaau_csp=1463342783~id=436d153413be3db8a64ad5b5f7 7910df; sc=TSV; WC_AUTHENTICATION_-1002=%2d1002%2cKTi2zn7kXLPNWkKUWFtJyHwnmw8%3d; [email protected]; lastLogin=1; qvcResetPW=80255029%7C1; _gat=1; cmReg=80255029; qvcauthenticed=true; username=Lothar+Uibel; bvqauser=9de170e61cd7058c32df39c5d9c2fd54646174653 d3230313630353135267573657269643d3830323535303239; WC_AUTHENTICATION_325249821=325249821%2czBjPJEnU6h miBSq47In8UAlEABs%3d; WC_USERACTIVITY_325249821=325249821%2c10253%2cnull %2cnull%2c1463343434340%2c1463345405477%2cnull%2cn ull%2cnull%2cnull%2cQZ0Kr7aoMP7633WIi%2bkcoicw%2f6 qN1mfarLlbPc12D1nrbosmLYtswSOit6LgJic%2bVC3TAI617f qt%0aS830tc3SHF4tAHubUSnYrr%2bS6ofnBCBwvlcg5K1vwz4 yHKVacdxH7bEa%2b0VPKS7aBsPDI9JlcrxO%0aUcPpn3Jfkuk1 j67A9Qg%3d; _gali=btnContinueAddressBook
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/webapp/wcs/stores/servlet/BillingDetailsView?storeId=10253&langId=-3&langId=-3&catalogId=10153&catalogId=10153&krypto=FUZE9vPtg 2OC7bEjJpCqFdR7%2B%2FrnCIkqLLfzpq9FuMTFYqgCq%2BC3g DkwG6jucGN0JIoIv%2BXpk%2FqP%0A6MwKYY8UgLd5nGNbTdzn TFs%2BA50rqCnb5a4aNtNSaIvNiawkCDna8izw1tPkeMdGB5hS e8XRKfaS%0Af4qmNPwSo85csD4hRXOUT%2BCI8goQyVipI8h0o 3f6Vb1EO3%2F6tL6mwFCpFwKTLTkE9yC7pYDz0MZt%0Af6ou3R E%3D&ddkey=https:OrderStatus
User input: QVC Gardinen Gardinen clicks regina.uibel @t-online.de regina.uibel@ t-online.de Kocharena<<<<<<<<< Kocharena1236987 Kocharena1236987 ReginaUibel Danziger Str.5233605Bielefeld 23.03.19 570521. 20 49 29<< 9 LotharUibel 80255029 regina.uibel@ t-online.de regina. re Kocharena1236987Kockarena1236987 Regina Uibel Danziger523B230 Kocharena1236987 EG Kocharena1236987 [email protected] Kocharena1236987 Kocharena1236987 Lothar<<<<<<r<lothar 802 550 29<< lothar 1301 Lowe!"§$%&Lowe!"§$%& 1301 1236987 Lowe1236987 Lowe1236987 Lowe1236987 Lowe1236987
POST data:
csrfToken=NkpmbWNmcTM0a0YvNGVFam9TNUltN3BZd1I2YlBl cFhheTM0K0FMQi9zTT0%3D
ccId=
payMethodExpireMonth=
payMethodExpireYear=
ccDtime=
payMethodNewCard=N
payMethodExpiryEdited=N
payMethodCVV=
orderId=79062335
langId=-3
catalogId=10153
storeId=10253
dummydata=
currentPaymentMethod=
checkoutStep=2
newCustomer=
customerId=80255029
URL=CreditCardConfirmation
ERR_URL=BillingDetailsView
CANCEL_URL=BillingDetailsView
fromPage=PaymentPage
isFromPayPage=true
InvalidCreditCard=
rbNewPaymentMethod=rbOpenAccount
NewCardType=VI
NewCardNumber=
hidNewLastCC=
cardHolderName=
selNewCard=05%2F2016
SecurityCodeNewCard=
========================================
Локальное время:15.05.2016 23:11:30
Время сессии: 03:47:12
Время отчета: 15.05.2016 21:10:38
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.settings/setuserdatavalues
Тип: HTTPS запрос
Размер (байты): 3 797
----------------------------------------
https://email.t-online.de/em/srv/service.settings/setuserdatavalues
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:29$_ss:0$_st:1463328534740$_pn:2%3B exp-session$ses_id:1463325173845%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
values%5Blisa.global.lastlogin.timestamp%5D=146334 6690
========================================
Локальное время:15.05.2016 23:11:30
Время сессии: 03:47:12
Время отчета: 15.05.2016 21:10:39
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 067
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:29$_ss:0$_st:1463328534740$_pn:2%3B exp-session$ses_id:1463325173845%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login
POST data:
messageXguidList%5BINBOX%5D%5B121558993911710%5D=1 21558993911710
messageXguidList%5BINBOX%5D%5B121558993911610%5D=1 21558993911610
messageXguidList%5BINBOX%5D%5B121558993911510%5D=1 21558993911510
messageXguidList%5BINBOX%5D%5B121558993911410%5D=1 21558993911410
messageXguidList%5BINBOX%5D%5B121558993911310%5D=1 21558993911310
========================================
Локальное время:15.05.2016 23:14:51
Время сессии: 03:50:33
Время отчета: 15.05.2016 21:16:51
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 850
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageId=121558993911610
folderId=INBOX
prevMsgId=121558993911710
nextMsgId=121558993911510
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:15.05.2016 23:14:52
Время сессии: 03:50:33
Время отчета: 15.05.2016 21:16:51
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 774
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
email=Registration%40newsletter.qvc.de
========================================
Локальное время:15.05.2016 23:15:25
Время сессии: 03:51:07
Время отчета: 15.05.2016 21:16:51
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/print/getmessage
Тип: HTTPS запрос
Размер (байты): 3 748
----------------------------------------
https://email.t-online.de/em/srv/print/getmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageId=121558993911610
folderId=INBOX
========================================
Локальное время:15.05.2016 23:15:31
Время сессии: 03:51:13
Время отчета: 15.05.2016 21:16:52
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 3 877
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
lastReceivedMail%5Buid%5D=121558993911710
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=ece1c00933f315 373adeec1f60517059
========================================
Локальное время:15.05.2016 23:16:19
Время сессии: 03:52:01
Время отчета: 15.05.2016 21:16:52
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 824
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageId=121558993911710
folderId=INBOX
nextMsgId=121558993911610
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:15.05.2016 23:16:20
Время сессии: 03:52:02
Время отчета: 15.05.2016 21:16:53
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 770
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
email=Neukunde%40newsletter.qvc.de
========================================
Локальное время:15.05.2016 23:16:43
Время сессии: 03:52:24
Время отчета: 15.05.2016 21:16:53
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/print/getmessage
Тип: HTTPS запрос
Размер (байты): 3 748
----------------------------------------
https://email.t-online.de/em/srv/print/getmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageId=121558993911710
folderId=INBOX
========================================
Локальное время:15.05.2016 23:19:32
Время сессии: 03:55:13
Время отчета: 15.05.2016 21:20:14
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 3 879
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 22
POST data:
lastReceivedMail%5Buid%5D=121558993911710
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=ece1c00933f315 373adeec1f60517059
========================================
Локальное время:15.05.2016 23:21:32
Время сессии: 03:57:14
Время отчета: 15.05.2016 21:23:16
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 052
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 22
POST data:
messageXguidList%5BINBOX%5D%5B121558993911210%5D=1 21558993911210
messageXguidList%5BINBOX%5D%5B121558993911110%5D=1 21558993911110
messageXguidList%5BINBOX%5D%5B121558993911010%5D=1 21558993911010
messageXguidList%5BINBOX%5D%5B121558993910710%5D=1 21558993910710
messageXguidList%5BINBOX%5D%5B121558993910510%5D=1 21558993910510
========================================
Локальное время:15.05.2016 23:21:46
Время сессии: 03:57:28
Время отчета: 15.05.2016 21:23:16
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/movemessages
Тип: HTTPS запрос
Размер (байты): 3 795
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/movemessages
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 22
POST data:
sourceFolderMessages%5BINBOX%5D=121558993911310
targetFolder=INBOX.Dennis
========================================
Локальное время:15.05.2016 23:21:47
Время сессии: 03:57:29
Время отчета: 15.05.2016 21:23:17
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfolders
Тип: HTTPS запрос
Размер (байты): 3 746
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfolders
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 22
POST data:
simplifyAlpsStructure=true
========================================
Локальное время:15.05.2016 23:21:51
Время сессии: 03:57:33
Время отчета: 15.05.2016 21:23:17
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/movemessages
Тип: HTTPS запрос
Размер (байты): 3 795
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/movemessages
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 22
POST data:
sourceFolderMessages%5BINBOX%5D=121558993911410
targetFolder=INBOX.Dennis
========================================
Локальное время:15.05.2016 23:21:58
Время сессии: 03:57:40
Время отчета: 15.05.2016 21:23:18
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 182
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 22
POST data:
messageXguidList%5BINBOX%5D%5B121558993911210%5D=1 21558993911210
messageXguidList%5BINBOX%5D%5B121558993911110%5D=1 21558993911110
messageXguidList%5BINBOX%5D%5B121558993911010%5D=1 21558993911010
messageXguidList%5BINBOX%5D%5B121558993910710%5D=1 21558993910710
messageXguidList%5BINBOX%5D%5B121558993910510%5D=1 21558993910510
messageXguidList%5BINBOX%5D%5B121558993910410%5D=1 21558993910410
messageXguidList%5BINBOX%5D%5B121558993910310%5D=1 21558993910310
========================================
Локальное время:15.05.2016 23:22:04
Время сессии: 03:57:46
Время отчета: 15.05.2016 21:23:18
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 3 985
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=8334; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:30$_ss:1$_st:1463348492700$_pn:1%3B exp-session$ses_id:1463346692700%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=5yniw6mhtcdrul46hl3sy7ypsfkz8vnl.12; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 22
POST data:
messageXguidList%5BINBOX%5D%5B121558993911710%5D=1 21558993911710
messageXguidList%5BINBOX%5D%5B121558993911610%5D=1 21558993911610
messageXguidList%5BINBOX%5D%5B121558993911510%5D=1 21558993911510
messageXguidList%5BINBOX%5D%5B12155899399810%5D=12 155899399810
======================================== 16.05.2016 ========================================
========================================
Bot ID: MD_8830_7875768FE856ABD9
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1031
Локальное время:16.05.2016 12:15:02
GMT: +2:00
Время сессии: 00:20:51
Время отчета: 16.05.2016 10:14:23
Страна: DE
IPv4: 84.134.179.186
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 3 877
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9299; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:31$_ss:1$_st:1463395444065$_pn:1%3B exp-session$ses_id:1463393644065%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=mnr32zyw1zsne2fkfrhc6jpzmhnmllaz.20; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
lastReceivedMail%5Buid%5D=121558993911710
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=4080831b931e0d db015a149f31d46a27
========================================
Локальное время:16.05.2016 12:33:07
Время сессии: 00:38:56
Время отчета: 16.05.2016 10:32:46
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 850
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9299; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:31$_ss:1$_st:1463395444065$_pn:1%3B exp-session$ses_id:1463393644065%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=mnr32zyw1zsne2fkfrhc6jpzmhnmllaz.20; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageId=121558993911210
folderId=INBOX
prevMsgId=121558993911510
nextMsgId=121558993911110
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:16.05.2016 12:33:08
Время сессии: 00:38:57
Время отчета: 16.05.2016 10:32:47
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 769
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9299; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:31$_ss:1$_st:1463395444065$_pn:1%3B exp-session$ses_id:1463393644065%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; POPUPCHECK=1463408676522; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=mnr32zyw1zsne2fkfrhc6jpzmhnmllaz.20; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
email=noreplyKSDHLPaket%40dhl.com
========================================
Локальное время:16.05.2016 12:54:08
Время сессии: 00:59:56
Время отчета: 16.05.2016 10:53:18
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.hse24.de/is-bin/INTERSHOP.enfinity/WFS/HSE24-DE-Site/de_DE/-/EUR/hse24_Tracking-SearchDisplay
Тип: HTTPS запрос
Размер (байты): 1 844
----------------------------------------
https://www.hse24.de/is-bin/INTERSHOP.enfinity/WFS/HSE24-DE-Site/de_DE/-/EUR/hse24_Tracking-SearchDisplay
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: sid=O6jE84eQF5_t89CpnlfR4eea3GtCG8Sg_ghA4DRCjNclQD JrkudCZHy-v7t3IadwyzLmlz_23u8K52BTvUCHw0IwehxJrw==; abt=CmsB; mkt=SEM_ia; __avail_session__=F33EEDFC-D5C8-4DA8-9449-4CE43A033021; __avail_data__=3; emos_jcsid=AAABVLkxS6*6CpbCzBMPz3C8h268k*e0:3:AAAB VLkzhRmG9ZwzcKdTusb1pIs0x4lp:1463396042009; emos_jcvid=AAABVLkxS6*6CpbCzBMPz3C8h268k*e0:1:AAAB VLkxS6*6CpbCzBMPz3C8h268k*e0:1463395896238:0:true: 4; ticker_day=%7B%22ticker_day%22%3A%22%22%7D; ticker_nk=%7B%22ticker_nk%22%3A%22%22%7D; ticker_count=%7B%22ticker_count%22%3A1%7D; nlLayer=%7B%22visits%22%3A1%7D; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; searchEvent=VmVyc2FuZGtvc3RlbmZyZWllIEFuZ2Vib3Rl## 1##0##VmVyc2FuZGtvc3RlbmZyZWllIEFuZ2Vib3Rl##non-native##Weiterleitung##Direkt; SearchSortingAttribute=LastOnAirDate-asc; SearchPageSize=24; LastSearchResultView=galleryLarge
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.hse24.de/is-bin/INTERSHOP.enfinity/WFS/HSE24-DE-Site/de_DE/-/EUR/ViewParametricSearchBySearchIndex-Start?SearchParameter=vkpfrei&SortingAttribute=Las tOnAirDate-asc&LandingPage=vkpLandingpage&nativeSearch=false
User input: QQVC<
POST data:
SourceRef=EcElju0-a
========================================
Локальное время:16.05.2016 16:58:03
Время сессии: 05:03:52
Время отчета: 16.05.2016 14:57:30
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.qvc.de/webapp/wcs/stores/servlet/LogonDE
Тип: HTTPS запрос
Размер (байты): 2 985
----------------------------------------
https://www.qvc.de/webapp/wcs/stores/servlet/LogonDE
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: session.timeout=false; __storejs__=%22__storejs__%22; mt.v=2.476007966.1463336728259; utag_main=v_id:0154b5aa7d5800010bbec2e9e53f1504100 8800d00718$_sn:3$_ss:1$_st:1463412116621$_pn:1%3Be xp-session$ses_id:1463410316621%3Bexp-session; _ga=GA1.2.2047048782.1463336732; IQVCREF=USS; qlastitms=280820%253B775692%253B503461%253B624554% 253B461834%253B463284%253B462696%253B462073%253B87 1215%253B841430%253B840809; qvcpdap=false; QVCProductListDisplayPrefs=gallery%7C%7C24; mt.t-lbx=10; OPTOUTMULTI=0:0%7Cc1:0%7Cc5:0%7Cc4:0; CoreM_State=85~1~-1~-1~E~6~6~6~10~10~0~0~|~B57C2D5E~575AC857~|~C43D3DE8 ~8EBFA476~A036817A~6878C0DC~8676A1F0~F1719166~FCFF 0178~157AED3B~|~~|~|0~1|0~1|0~1~2~3~4~5~6~7|1~1~1~ 1~2~1~1~2||; _vwo_uuid_v2=2E397B70B8CF78BEF0B324529D79610E|5c0b bbe1857c7922c10a7cb27f5c8228; WC_PERSISTENT=KIbfFnjODj0S03jZ%2f3oBBYxDPFY%3d%0a% 3b2016%2d05%2d15+16%3a17%3a14%2e338%5f146334343433 7%2d99%5f10253%5f325249821%2c%2d3%2cEUR%5f10253; authFlags=11; uattrmb=NV0CSNULL; qvcBoxConfigOrder=%3A; lastLogin=1; qvcResetPW=80255029%7C1; akaau=1463410561~id=d915225843da9a261c62672077713b bb; akaau_geo=1463395962~id=5d0b10564ccabd3734385179ba ffe026; curntChnl=QVC; qvcuname=; cmTPSet=Y; qvcHideMasthead=1; PE=1463410317743; CMAVID=none; dc=SP; JSESSIONID=00002iJOqqvE9I7tPalzL4ygRLb:16k88d0dl; ak-migr-origin=true; qvcpdvol=0; eqsid_=1463394993130; mQL=; WC_SESSION_ESTABLISHED=true; akaau_csp=1463396911~id=8855ff9c5db7a86a3886a5a336 9704a0; session.timeout=true; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; _gat=1; _gali=btnSignIn; [email protected]
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.qvc.de/webapp/wcs/stores/servlet/MyAccountView?storeId=10253&langId=-3&catalogId=10153&krypto=JeuX%2BVEXYJB2VpJqM5V0LA% 3D%3D&ddkey=http:MyAccountView
User input: QQVC< Lowe Lowe1236987
POST data:
storeId=10253
catalogId=10153
langId=-3
URL=%2Fwebapp%2Fwcs%2Fstores%2Fservlet%2FMyAccount View%3FstoreId%3D10253%26catalogId%3D10153%26langI d%3D-3%26krypto%3DTO8P32GOI35qSgHITNzO6P2W1dDiRgqXyOefI wLAwmDrzLstgCQyPyFSCc9VqasKmGZ9bo9YqCA%253D
reLogonURL=LogonForm
rememberMe=true
bvauthenticateuser=
bvdisplaycode=
bvcategoryid=
bvproductid=
bvcontenttype=
bvpage=
bvappcode=
logonId=lothar.uibel%40t-online.de
logonPassword=L%C3%B6we1236987
userPrefs=
csrfToken=NkpmbWNmcTM0a0YvNGVFam9TNUltN3BZd1I2YlBl cFhheTM0K0FMQi9zTT0%3D
========================================
Локальное время:16.05.2016 17:00:45
Время сессии: 05:06:34
Время отчета: 16.05.2016 15:00:45
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.settings/setuserdatavalues
Тип: HTTPS запрос
Размер (байты): 3 806
----------------------------------------
https://email.t-online.de/em/srv/service.settings/setuserdatavalues
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=7189; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:31$_ss:1$_st:1463395444065$_pn:1%3B exp-session$ses_id:1463393644065%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; lisid=o2ovfqg4ifruguev0nsfttqytnzggnuy.14; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; crt_to205=1; kicker200=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: QQVC< Lowe Lowe1236987
POST data:
values%5Blisa.global.lastlogin.timestamp%5D=146341 0846
========================================
Локальное время:16.05.2016 17:00:46
Время сессии: 05:06:35
Время отчета: 16.05.2016 15:00:45
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 076
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=7189; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:31$_ss:1$_st:1463395444065$_pn:1%3B exp-session$ses_id:1463393644065%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; lisid=o2ovfqg4ifruguev0nsfttqytnzggnuy.14; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; crt_to205=1; kicker200=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: QQVC< Lowe Lowe1236987
POST data:
messageXguidList%5BINBOX%5D%5B121558993911710%5D=1 21558993911710
messageXguidList%5BINBOX%5D%5B121558993911610%5D=1 21558993911610
messageXguidList%5BINBOX%5D%5B121558993911510%5D=1 21558993911510
messageXguidList%5BINBOX%5D%5B121558993911210%5D=1 21558993911210
messageXguidList%5BINBOX%5D%5B121558993911110%5D=1 21558993911110
========================================
Локальное время:16.05.2016 17:01:05
Время сессии: 05:06:54
Время отчета: 16.05.2016 15:00:46
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 876
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=7189; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:32$_ss:1$_st:1463412649752$_pn:1%3B exp-session$ses_id:1463410849752%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; lisid=o2ovfqg4ifruguev0nsfttqytnzggnuy.14; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; crt_to205=1; kicker200=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463497251003
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: QQVC< Lowe Lowe1236987
POST data:
messageId=121558993911710
folderId=INBOX
nextMsgId=121558993911610
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:16.05.2016 17:01:06
Время сессии: 05:06:54
Время отчета: 16.05.2016 15:00:46
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 822
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=7189; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:32$_ss:1$_st:1463412649752$_pn:1%3B exp-session$ses_id:1463410849752%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; lisid=o2ovfqg4ifruguev0nsfttqytnzggnuy.14; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; crt_to205=1; kicker200=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463497251003
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: QQVC< Lowe Lowe1236987
POST data:
email=Neukunde%40newsletter.qvc.de
========================================
Локальное время:16.05.2016 17:01:45
Время сессии: 05:07:34
Время отчета: 16.05.2016 15:03:46
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 3 929
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=7189; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:32$_ss:1$_st:1463412649752$_pn:1%3B exp-session$ses_id:1463410849752%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; lisid=o2ovfqg4ifruguev0nsfttqytnzggnuy.14; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; crt_to205=1; kicker200=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463497251003
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: QQVC< Lowe Lowe1236987
POST data:
lastReceivedMail%5Buid%5D=121558993911710
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=4080831b931e0d db015a149f31d46a27
========================================
Локальное время:16.05.2016 17:05:56
Время сессии: 05:11:44
Время отчета: 16.05.2016 15:07:09
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 902
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=7189; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:32$_ss:1$_st:1463412649752$_pn:1%3B exp-session$ses_id:1463410849752%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; lisid=o2ovfqg4ifruguev0nsfttqytnzggnuy.14; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; crt_to205=1; kicker200=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463497251003
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: QQVC< Lowe Lowe1236987
POST data:
messageId=121558993911610
folderId=INBOX
prevMsgId=121558993911710
nextMsgId=121558993911510
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:16.05.2016 17:05:57
Время сессии: 05:11:46
Время отчета: 16.05.2016 15:07:09
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 826
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=7189; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:32$_ss:1$_st:1463412649752$_pn:1%3B exp-session$ses_id:1463410849752%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; lisid=o2ovfqg4ifruguev0nsfttqytnzggnuy.14; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; crt_to205=1; kicker200=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463497251003
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: QQVC< Lowe Lowe1236987
POST data:
email=Registration%40newsletter.qvc.de
========================================
Локальное время:16.05.2016 17:07:45
Время сессии: 05:13:34
Время отчета: 16.05.2016 15:07:10
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 029
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=7189; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:32$_ss:1$_st:1463412649752$_pn:1%3B exp-session$ses_id:1463410849752%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; Kicker110=1; criteo205=1; crt_to450=1; lisid=o2ovfqg4ifruguev0nsfttqytnzggnuy.14; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; crt_to205=1; kicker200=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463497251003
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: QQVC< Lowe Lowe1236987
POST data:
lastReceivedMail%5Buid%5D=121558993911810
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=301df46e14bbab 410da07924459b1269
incomingStates%5BINBOX%5D%5Bchanged%5D=true
incomingStates%5BINBOX%5D%5BhasReceivedNewMail%5D= false
========================================
Локальное время:16.05.2016 17:13:45
Время сессии: 05:19:34
Время отчета: 16.05.2016 15:13:12
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 3 990
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=7189; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:32$_ss:1$_st:1463412649752$_pn:1%3B exp-session$ses_id:1463410849752%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; lisid=o2ovfqg4ifruguev0nsfttqytnzggnuy.14; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; kicker200=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; POPUPCHECK=1463497251003
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: QQVC< Lowe Lowe1236987
POST data:
lastReceivedMail%5Buid%5D=121558993911810
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=301df46e14bbab 410da07924459b1269
incomingStates%5BINBOX%5D%5Bchanged%5D=true
incomingStates%5BINBOX%5D%5BhasReceivedNewMail%5D= false
======================================== 17.05.2016 ========================================
========================================
Bot ID: MD_8830_7875768FE856ABD9
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1031
Локальное время:17.05.2016 14:40:40
GMT: +2:00
Время сессии: 00:04:54
Время отчета: 17.05.2016 12:40:07
Страна: DE
IPv4: 84.134.179.186
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.settings/setuserdatavalues
Тип: HTTPS запрос
Размер (байты): 3 767
----------------------------------------
https://email.t-online.de/em/srv/service.settings/setuserdatavalues
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:32$_ss:1$_st:1463412649752$_pn:1%3B exp-session$ses_id:1463410849752%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
values%5Blisa.global.lastlogin.timestamp%5D=146348 8840
========================================
Локальное время:17.05.2016 14:40:40
Время сессии: 00:04:54
Время отчета: 17.05.2016 12:40:08
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 037
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:32$_ss:1$_st:1463412649752$_pn:1%3B exp-session$ses_id:1463410849752%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageXguidList%5BINBOX%5D%5B121558993912610%5D=1 21558993912610
messageXguidList%5BINBOX%5D%5B121558993912510%5D=1 21558993912510
messageXguidList%5BINBOX%5D%5B121558993912410%5D=1 21558993912410
messageXguidList%5BINBOX%5D%5B121558993912310%5D=1 21558993912310
messageXguidList%5BINBOX%5D%5B121558993912210%5D=1 21558993912210
========================================
Локальное время:17.05.2016 14:41:03
Время сессии: 00:05:16
Время отчета: 17.05.2016 12:43:08
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 811
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageId=121558993912610
folderId=INBOX
nextMsgId=121558993912510
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:17.05.2016 14:41:03
Время сессии: 00:05:17
Время отчета: 17.05.2016 12:43:09
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 777
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
email=QVC_Kundenservice_bitte_nicht_antworten%40qv c.de
========================================
Локальное время:17.05.2016 14:41:41
Время сессии: 00:05:54
Время отчета: 17.05.2016 12:43:09
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 3 864
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:17.05.2016 14:42:29
Время сессии: 00:06:43
Время отчета: 17.05.2016 12:43:10
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 037
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageXguidList%5BINBOX%5D%5B121558993912110%5D=1 21558993912110
messageXguidList%5BINBOX%5D%5B121558993912010%5D=1 21558993912010
messageXguidList%5BINBOX%5D%5B121558993911910%5D=1 21558993911910
messageXguidList%5BINBOX%5D%5B121558993911810%5D=1 21558993911810
messageXguidList%5BINBOX%5D%5B121558993911710%5D=1 21558993911710
========================================
Локальное время:17.05.2016 14:42:34
Время сессии: 00:06:48
Время отчета: 17.05.2016 12:43:10
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/setmessageflags
Тип: HTTPS запрос
Размер (байты): 3 809
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/setmessageflags
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
folderMessages%5BINBOX%5D%5B%5D=121558993912310
messageFlag%5BSeen%5D=true
messageFlag%5BUnseen%5D=
========================================
Локальное время:17.05.2016 14:47:22
Время сессии: 00:11:36
Время отчета: 17.05.2016 12:46:29
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 837
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageId=121558993912010
folderId=INBOX
prevMsgId=121558993912110
nextMsgId=121558993911910
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:17.05.2016 14:47:23
Время сессии: 00:11:37
Время отчета: 17.05.2016 12:49:30
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 755
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
email=lothar.uibel%40t-online.de
========================================
Локальное время:17.05.2016 14:47:51
Время сессии: 00:12:05
Время отчета: 17.05.2016 12:49:31
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.magentacloud.de/api/share/token
Тип: HTTPS запрос
Размер (байты): 811
----------------------------------------
https://www.magentacloud.de/api/share/token
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.magentacloud.de/share/yrv74s-2.4
User input:
POST data:
id=yrv74s-2.4
========================================
Локальное время:17.05.2016 14:47:51
Время сессии: 00:12:05
Время отчета: 17.05.2016 12:49:31
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.magentacloud.de/api/dir?path=/&fields=id%2Cpath%2Cwritable%2Cmembers.id%2Cmember s.parent_id%2Cmembers.name%2Cmembers.mtime%2Cmembe rs.path%2Cmembers.readable%2Cmembers.type%2Cmember s.image.width%2Cmembers.image.height%2Cmembers.siz e&members=all&limit=0%2C5000
Тип: HTTPS запрос
Размер (байты): 1 099
----------------------------------------
https://www.magentacloud.de/api/dir?path=/&fields=id%2Cpath%2Cwritable%2Cmembers.id%2Cmember s.parent_id%2Cmembers.name%2Cmembers.mtime%2Cmembe rs.path%2Cmembers.readable%2Cmembers.type%2Cmember s.image.width%2Cmembers.image.height%2Cmembers.siz e&members=all&limit=0%2C5000
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.magentacloud.de/share/yrv74s-2.4
User input:
HTTP authentication (encoded): Bearer eUsxc0hYN09TNUZ3THBxcFVuMHM=
POST data:
*EMPTY*
========================================
Локальное время:17.05.2016 14:55:40
Время сессии: 00:19:54
Время отчета: 17.05.2016 12:56:03
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 037
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageXguidList%5BINBOX%5D%5B121558993911610%5D=1 21558993911610
messageXguidList%5BINBOX%5D%5B121558993911510%5D=1 21558993911510
messageXguidList%5BINBOX%5D%5B121558993911210%5D=1 21558993911210
messageXguidList%5BINBOX%5D%5B121558993911110%5D=1 21558993911110
messageXguidList%5BINBOX%5D%5B121558993911010%5D=1 21558993911010
========================================
Локальное время:17.05.2016 14:55:49
Время сессии: 00:20:02
Время отчета: 17.05.2016 12:56:04
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 035
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageXguidList%5BINBOX%5D%5B121558993910710%5D=1 21558993910710
messageXguidList%5BINBOX%5D%5B121558993910510%5D=1 21558993910510
messageXguidList%5BINBOX%5D%5B121558993910410%5D=1 21558993910410
messageXguidList%5BINBOX%5D%5B121558993910310%5D=1 21558993910310
messageXguidList%5BINBOX%5D%5B12155899399810%5D=12 155899399810
========================================
Локальное время:17.05.2016 14:55:57
Время сессии: 00:20:11
Время отчета: 17.05.2016 12:56:04
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 836
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageId=121558993910310
folderId=INBOX
prevMsgId=121558993910410
nextMsgId=12155899399810
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:17.05.2016 14:55:58
Время сессии: 00:20:12
Время отчета: 17.05.2016 12:56:05
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 752
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
email=trackandtrace%40dhl.com
========================================
Локальное время:17.05.2016 15:07:39
Время сессии: 00:31:53
Время отчета: 17.05.2016 13:08:10
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 837
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageId=121558993912410
folderId=INBOX
prevMsgId=121558993912510
nextMsgId=121558993912310
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:17.05.2016 15:07:52
Время сессии: 00:32:06
Время отчета: 17.05.2016 13:08:11
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/print/getmessage
Тип: HTTPS запрос
Размер (байты): 3 735
----------------------------------------
https://email.t-online.de/em/srv/print/getmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input:
POST data:
messageId=121558993912410
folderId=INBOX
========================================
Локальное время:17.05.2016 15:11:41
Время сессии: 00:35:55
Время отчета: 17.05.2016 13:11:13
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 3 867
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:17.05.2016 15:28:24
Время сессии: 00:52:38
Время отчета: 17.05.2016 13:29:19
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 840
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2
POST data:
messageId=121558993912510
folderId=INBOX
prevMsgId=121558993912610
nextMsgId=121558993912410
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:17.05.2016 15:28:25
Время сессии: 00:52:39
Время отчета: 17.05.2016 13:29:20
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 758
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2
POST data:
email=lothar.uibel%40t-online.de
========================================
Локальное время:17.05.2016 15:30:03
Время сессии: 00:54:17
Время отчета: 17.05.2016 13:29:21
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/print/getmessage
Тип: HTTPS запрос
Размер (байты): 3 738
----------------------------------------
https://email.t-online.de/em/srv/print/getmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2
POST data:
messageId=121558993912510
folderId=INBOX
========================================
Локальное время:17.05.2016 15:31:09
Время сессии: 00:55:22
Время отчета: 17.05.2016 13:32:22
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 3 840
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2
POST data:
messageId=121558993912310
folderId=INBOX
prevMsgId=121558993912410
nextMsgId=121558993912210
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:17.05.2016 15:31:12
Время сессии: 00:55:26
Время отчета: 17.05.2016 13:32:22
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/writemessage
Тип: HTTPS запрос
Размер (байты): 3 849
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/writemessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2
POST data:
folderId=INBOX
messageId=121558993912310
messageIds%5B%5D=121558993912310
action=forward
subjectData=
editorMode=auto
loadExternalContent=1
========================================
Локальное время:17.05.2016 15:31:13
Время сессии: 00:55:27
Время отчета: 17.05.2016 13:32:23
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/loadcontactsforcommunication
Тип: HTTPS запрос
Размер (байты): 3 744
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/loadcontactsforcommunication
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2
POST data:
commtype=email
========================================
Локальное время:17.05.2016 15:31:24
Время сессии: 00:55:38
Время отчета: 17.05.2016 13:32:23
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/emig/emig
Тип: HTTPS запрос
Размер (байты): 3 758
----------------------------------------
https://email.t-online.de/em/srv/emig/emig
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d
POST data:
srv=emailsaresecure
params%5Bemails%5D%5B%5D=dennisuibel%40aol.de
========================================
Локальное время:17.05.2016 15:31:42
Время сессии: 00:55:55
Время отчета: 17.05.2016 13:32:24
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 3 869
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:17.05.2016 15:32:42
Время сессии: 00:56:55
Время отчета: 17.05.2016 13:32:24
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 3 931
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:17.05.2016 15:33:42
Время сессии: 00:57:55
Время отчета: 17.05.2016 13:35:24
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 001
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:17.05.2016 15:34:14
Время сессии: 00:58:27
Время отчета: 17.05.2016 13:35:25
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.communication/saveemail
Тип: HTTPS запрос
Размер (байты): 7 241
----------------------------------------
https://email.t-online.de/em/srv/service.communication/saveemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
sender=regina.uibel%40t-online.de
recipientsTo=%22Uibel%2C Dennis%22 %3Cdennisuibel%40aol.de%3E
recipientsCc=
recipientsBcc=
subject=WG%3A 3. Versuch mit Sch%C3%B6nheit der Math.
folderId=INBOX
messageIdContinue=
messageIdsForward%5B0%5D%5Bfolder%5D=INBOX
messageIdsForward%5B0%5D%5Buid%5D=121558993912310
messageIdHeader=
messageIdReplyTo=
originatorFolder=
originatorUid=
priority=normal
returnReceipt=false
attachments%5Bstorage%5D%5B0%5D%5Bid%5D=770711169
attachments%5Bstorage%5D%5B0%5D%5Bdisposition%5D=a ttachment
attachments%5Bstorage%5D%5B0%5D%5Bsize%5D=781222
attachments%5Bstorage%5D%5B0%5D%5Bissignaturefile% 5D=false
cleanUpAttachments=true
text=%3Cp style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3Aarial%2Chelvetica%2Csans-serif%3Bfont-size%3A10pt%3Bcolor%3A%23000000%3Btext-decoration%3Anone%22%3E%26nbsp%3B%3C%2Fspan%3E%3C% 2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3Aarial%2Chelvetica%2Csans-serif%3Bfont-size%3A10pt%3Bcolor%3A%23000000%3Btext-decoration%3Anone%22%3EHallo Dennis%2C%3Cbr %2F%3E%3C%2Fspan%3E%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3Aarial%2Chelvetica%2Csans-serif%3Bfont-size%3A10pt%3Bcolor%3A%23000000%3Btext-decoration%3Anone%22%3Enun habe ich es nocheinmal anders versucht.%3C%2Fspan%3E%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3Aarial%2Chelvetica%2Csans-serif%3Bfont-size%3A10pt%3Bcolor%3A%23000000%3Btext-decoration%3Anone%22%3EVielleicht gelingt es Dir diesmal den Anhang zu %26ouml%3Bffnen.%3C%2Fspan%3E%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3Aarial%2Chelvetica%2Csans-serif%3Bfont-size%3A10pt%3Bcolor%3A%23000000%3Btext-decoration%3Anone%22%3EAlles Gute%2C Lothar.%3C%2Fspan%3E%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E-----Original-Nachricht-----%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3EBetreff%3A 3. Versuch mit Sch%26ouml%3Bnheit der Math.%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3EDatum%3A 2016-05-17T01%3A03%3A57%2B0200%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3EVon%3A %22lothar.uibel%40t-online.de%22 %26lt%3Blothar.uibel%40t-online.de%26gt%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3EAn%3A %22Uibel%2C Regina%22 %26lt%3Bregina.uibel%40t-online.de%26gt%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cdiv%3E%0A%3C p style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3A arial%2Chelvetica%2Csans-serif%3B font-size%3A 10pt%3B color%3A %23000000%3B text-decoration%3A none%3B%22%3Etest%3Cbr %2F%3E%3C%2Fspan%3E%3C%2Fp%3E%0A%3C%2Fdiv%3E%EF%BB %BF
textType=html
smsAnsweredNotification=false
forwardsMsgs%5B0%5D%5Bfolder%5D=INBOX
forwardsMsgs%5B0%5D%5Buid%5D=121558993912310
forwardsMsgs%5B0%5D%5BmsgIdHeader%5D=
========================================
Локальное время:17.05.2016 15:34:14
Время сессии: 00:58:28
Время отчета: 17.05.2016 13:35:25
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfolders
Тип: HTTPS запрос
Размер (байты): 3 895
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfolders
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
simplifyAlpsStructure=true
========================================
Локальное время:17.05.2016 15:34:19
Время сессии: 00:58:33
Время отчета: 17.05.2016 13:35:26
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.communication/sendemail
Тип: HTTPS запрос
Размер (байты): 7 290
----------------------------------------
https://email.t-online.de/em/srv/service.communication/sendemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
sender=regina.uibel%40t-online.de
recipientsTo=%22Uibel%2C Dennis%22 %3Cdennisuibel%40aol.de%3E
recipientsCc=
recipientsBcc=
subject=WG%3A 3. Versuch mit Sch%C3%B6nheit der Math.
folderId=INBOX.Drafts
messageIdContinue=121558994014210
messageIdsForward%5B0%5D%5Bfolder%5D=INBOX
messageIdsForward%5B0%5D%5Buid%5D=121558993912310
messageIdHeader=
messageIdReplyTo=
originatorFolder=INBOX.Drafts
originatorUid=121558994014210
priority=normal
returnReceipt=false
attachments%5Bstorage%5D%5B0%5D%5Bid%5D=770711169
attachments%5Bstorage%5D%5B0%5D%5Bdisposition%5D=a ttachment
attachments%5Bstorage%5D%5B0%5D%5Bsize%5D=781222
attachments%5Bstorage%5D%5B0%5D%5Bissignaturefile% 5D=false
cleanUpAttachments=true
text=%3Cp style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3Aarial%2Chelvetica%2Csans-serif%3Bfont-size%3A10pt%3Bcolor%3A%23000000%3Btext-decoration%3Anone%22%3E%26nbsp%3B%3C%2Fspan%3E%3C% 2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3Aarial%2Chelvetica%2Csans-serif%3Bfont-size%3A10pt%3Bcolor%3A%23000000%3Btext-decoration%3Anone%22%3EHallo Dennis%2C%3Cbr %2F%3E%3C%2Fspan%3E%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3Aarial%2Chelvetica%2Csans-serif%3Bfont-size%3A10pt%3Bcolor%3A%23000000%3Btext-decoration%3Anone%22%3Enun habe ich es nocheinmal anders versucht.%3C%2Fspan%3E%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3Aarial%2Chelvetica%2Csans-serif%3Bfont-size%3A10pt%3Bcolor%3A%23000000%3Btext-decoration%3Anone%22%3EVielleicht gelingt es Dir diesmal den Anhang zu %26ouml%3Bffnen.%3C%2Fspan%3E%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3Aarial%2Chelvetica%2Csans-serif%3Bfont-size%3A10pt%3Bcolor%3A%23000000%3Btext-decoration%3Anone%22%3EAlles Gute%2C Lothar.%3C%2Fspan%3E%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E-----Original-Nachricht-----%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3EBetreff%3A 3. Versuch mit Sch%26ouml%3Bnheit der Math.%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3EDatum%3A 2016-05-17T01%3A03%3A57%2B0200%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3EVon%3A %22lothar.uibel%40t-online.de%22 %26lt%3Blothar.uibel%40t-online.de%26gt%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3EAn%3A %22Uibel%2C Regina%22 %26lt%3Bregina.uibel%40t-online.de%26gt%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cp style%3D%22margin%3A 0px%3B%22%3E%26nbsp%3B%3C%2Fp%3E%0A%3Cdiv%3E%0A%3C p style%3D%22margin%3A 0px%3B%22%3E%3Cspan style%3D%22font-family%3A arial%2Chelvetica%2Csans-serif%3B font-size%3A 10pt%3B color%3A %23000000%3B text-decoration%3A none%3B%22%3Etest%3Cbr %2F%3E%3C%2Fspan%3E%3C%2Fp%3E%0A%3C%2Fdiv%3E%EF%BB %BF
textType=html
smsAnsweredNotification=false
forwardsMsgs%5B0%5D%5Bfolder%5D=INBOX
forwardsMsgs%5B0%5D%5Buid%5D=121558993912310
forwardsMsgs%5B0%5D%5BmsgIdHeader%5D=
========================================
Локальное время:17.05.2016 15:34:40
Время сессии: 00:58:54
Время отчета: 17.05.2016 13:35:26
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 4 001
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
messageId=121558993912210
folderId=INBOX
prevMsgId=121558993912310
nextMsgId=121558993912110
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:17.05.2016 15:34:41
Время сессии: 00:58:55
Время отчета: 17.05.2016 13:35:27
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 919
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
email=lothar.uibel%40t-online.de
========================================
Локальное время:17.05.2016 15:34:42
Время сессии: 00:58:56
Время отчета: 17.05.2016 13:35:27
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 028
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:17.05.2016 15:37:08
Время сессии: 01:01:21
Время отчета: 17.05.2016 13:38:28
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 4 001
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
messageId=121558993911810
folderId=INBOX
prevMsgId=121558993911910
nextMsgId=121558993911710
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:17.05.2016 15:37:09
Время сессии: 01:01:23
Время отчета: 17.05.2016 13:38:28
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 3 925
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
email=Registration%40newsletter.qvc.de
========================================
Локальное время:17.05.2016 15:41:42
Время сессии: 01:05:56
Время отчета: 17.05.2016 13:41:30
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 041
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; criteo205=1
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:17.05.2016 15:42:42
Время сессии: 01:06:56
Время отчета: 17.05.2016 13:44:30
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 054
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; criteo205=1; Kicker110=1
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:17.05.2016 15:49:42
Время сессии: 01:13:56
Время отчета: 17.05.2016 13:50:33
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 081
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:17.05.2016 15:51:40
Время сессии: 01:15:54
Время отчета: 17.05.2016 13:53:34
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 4 086
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
messageId=121558993911910
folderId=INBOX
prevMsgId=121558993912010
nextMsgId=121558993911810
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:17.05.2016 15:51:41
Время сессии: 01:15:55
Время отчета: 17.05.2016 13:53:34
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 4 004
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
email=lothar.uibel%40t-online.de
========================================
Локальное время:17.05.2016 15:51:42
Время сессии: 01:15:56
Время отчета: 17.05.2016 13:53:35
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 113
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:17.05.2016 15:52:25
Время сессии: 01:16:39
Время отчета: 17.05.2016 13:53:35
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.magentacloud.de/api/share/token
Тип: HTTPS запрос
Размер (байты): 1 122
----------------------------------------
https://www.magentacloud.de/api/share/token
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: utag_main=v_id:0154bec21669000a7549402282f91504100 2f00d00718$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1463491071545$ses_id:1463489271401%3Be xp-session; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.magentacloud.de/share/i13-4wgrmk
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
id=i13-4wgrmk
========================================
Локальное время:17.05.2016 15:52:25
Время сессии: 01:16:39
Время отчета: 17.05.2016 13:53:35
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.magentacloud.de/api/dir?path=/&fields=id%2Cpath%2Cwritable%2Cmembers.id%2Cmember s.parent_id%2Cmembers.name%2Cmembers.mtime%2Cmembe rs.path%2Cmembers.readable%2Cmembers.type%2Cmember s.image.width%2Cmembers.image.height%2Cmembers.siz e&members=all&limit=0%2C5000
Тип: HTTPS запрос
Размер (байты): 1 410
----------------------------------------
https://www.magentacloud.de/api/dir?path=/&fields=id%2Cpath%2Cwritable%2Cmembers.id%2Cmember s.parent_id%2Cmembers.name%2Cmembers.mtime%2Cmembe rs.path%2Cmembers.readable%2Cmembers.type%2Cmember s.image.width%2Cmembers.image.height%2Cmembers.siz e&members=all&limit=0%2C5000
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: utag_main=v_id:0154bec21669000a7549402282f91504100 2f00d00718$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1463491071545$ses_id:1463489271401%3Be xp-session; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.magentacloud.de/share/i13-4wgrmk
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
HTTP authentication (encoded): Bearer QkZCR1lqa25NQ0RrMmxPV3hJZ0k=
POST data:
*EMPTY*
========================================
Локальное время:17.05.2016 15:56:50
Время сессии: 01:21:04
Время отчета: 17.05.2016 13:56:38
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 4 086
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
messageId=121558993912510
folderId=INBOX
prevMsgId=121558993912610
nextMsgId=121558993912410
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:17.05.2016 15:59:29
Время сессии: 01:23:43
Время отчета: 17.05.2016 13:59:39
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.settings/setuserdatavalues
Тип: HTTPS запрос
Размер (байты): 4 017
----------------------------------------
https://email.t-online.de/em/srv/service.settings/setuserdatavalues
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=2302; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjowLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjI5OTYzNjksInBsX3Qtb25saW5lLXRlY XNlcjYiOjYsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; POPUPCHECK=1463497251003; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=uixaqt2jidlrugnq746wfyra4q4iy4t4.23; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
values%5Blisa.global.lastlogout.timestamp%5D=14634 93570
========================================
Локальное время:17.05.2016 15:59:39
Время сессии: 01:23:53
Время отчета: 17.05.2016 13:59:40
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://rover.ebay.com/ar/1/707-220017-51195-16/4?mpt=[CACHEBUSTER]&siteid=77&adtype=0&size=1x1&ipn=admain2&placement =436892&mpvc=
Тип: HTTPS запрос
Размер (байты): 826
----------------------------------------
https://rover.ebay.com/ar/1/707-220017-51195-16/4?mpt=[CACHEBUSTER]&siteid=77&adtype=0&size=1x1&ipn=admain2&placement =436892&mpvc=
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D8705033353606390585919c9d4^tguid/57eaba7c1540a602ef17d177fed30f675919c9d4^cguid/57eaba7c1540a602ef17d177fed30f665919c9d4^; dp1=bu1p/QEBfX0BAX19AQA**5919c9d6^bl/DE5afafd56^; nonsession=CgADLAAFXOJ1eMwDKACBgnpfWNTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNjc+0oXJ
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: http://www.t-online.de/?logout
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
*EMPTY*
========================================
Локальное время:17.05.2016 15:59:42
Время сессии: 01:23:55
Время отчета: 17.05.2016 13:59:40
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://tipi.api.t-online.de/getUserData.json
Тип: HTTPS запрос
Размер (байты): 3 515
----------------------------------------
https://tipi.api.t-online.de/getUserData.json
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoxLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM0OTM1MjEsInBsX3Qtb25saW5lLXRlY XNlcjYiOjIsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=e0,e24,e7,e8,e9,eb,ed,e1l,e1m,e1o,e1p,e1q,e1r ,e3a,e3b,e43,e49,e4h,e4l,e4s,e4y,e1,e4i,e38,e39,e3 k,e3l,e56,e58,e5e,e5f,e5m,e5n,e5o,e5p,e5q,e5r,e5x, e61,e6b,e63,e64,e6a,e6i,e7j,e7s,e7w,ea0,ea1,ead,ea 6,ea7,ea9,eab,CAT,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; wetterim=weatherdata:tmax:18:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:38:rainProb:33.7:location: uni:K05913000:zip:null:city:null; JSESSIONID=AFB6A532DDE2C7AF55E8EFF8BDE58098
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: http://www.t-online.de/-/id_62530634/tid_tsr_iframe/index
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
apikey=H3Dgz7cB3Keuzig736dibwVUI37Dbi3BBFig732b
========================================
Локальное время:17.05.2016 15:59:46
Время сессии: 01:23:59
Время отчета: 17.05.2016 13:59:40
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://rover.ebay.com/ar/1/707-220017-51195-1/4?mpt=493530952&siteid=77&adtype=0&size=1x1&ipn=ad main2&placement=436101&mpvc=
Тип: HTTPS запрос
Размер (байты): 821
----------------------------------------
https://rover.ebay.com/ar/1/707-220017-51195-1/4?mpt=493530952&siteid=77&adtype=0&size=1x1&ipn=ad main2&placement=436101&mpvc=
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D870503335360639058591c5714^cguid/57eaba7c1540a602ef17d177fed30f66591c5714^tguid/57eaba7c1540a602ef17d177fed30f67591c5714^; dp1=bu1p/QEBfX0BAX19AQA**5919c9d6^bl/DE5afafd56^; nonsession=CgADLAAFXOJ1eMwDKACBgnpfWNTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNjc+0oXJ
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: http://www.t-online.de/?logout
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
*EMPTY*
========================================
Локальное время:17.05.2016 15:59:54
Время сессии: 01:24:08
Время отчета: 17.05.2016 13:59:41
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://tipi.api.t-online.de/getUserData.json
Тип: HTTPS запрос
Размер (байты): 3 587
----------------------------------------
https://tipi.api.t-online.de/getUserData.json
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoxLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM0OTM1MjEsInBsX3Qtb25saW5lLXRlY XNlcjYiOjIsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; wetterim=weatherdata:tmax:18:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:38:rainProb:33.7:location: uni:K05913000:zip:null:city:null; JSESSIONID=AFB6A532DDE2C7AF55E8EFF8BDE58098
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: http://www.t-online.de/-/id_62530634/tid_tsr_iframe/index
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
apikey=H3Dgz7cB3Keuzig736dibwVUI37Dbi3BBFig732b
========================================
Локальное время:17.05.2016 15:59:55
Время сессии: 01:24:09
Время отчета: 17.05.2016 13:59:41
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://banners.webmasterplan.com/pvdi.aspx?ref=501528&js=1&site=1332&b=310&subid=AL BF.DFNz.CEuH.o_buYFNa53iOCYuSBx9Etw.Fd4.2&pvDiDone =1
Тип: HTTPS запрос
Размер (байты): 2 151
----------------------------------------
https://banners.webmasterplan.com/pvdi.aspx?ref=501528&js=1&site=1332&b=310&subid=AL BF.DFNz.CEuH.o_buYFNa53iOCYuSBx9Etw.Fd4.2&pvDiDone =1
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: affili_0=uid=ahhwdqru0yqo2q5f4wsimc4v&cookieId=029 73dae-6e91-43b1-aae9-967e4a1eb015&date=2016-05-17T15:58:58; affili_4655pv=ref=501528&subid=ALBF.DFN_.B_cx.F56u aBZpsHHjamFRUSjFzg.Fd4.2&date=2016-05-17&cltime=2016-05-17T15:58:58&oldcltime=2016-05-11T21:53:26&linkType=1&linkNb=509&dt=64312646A07C5 16FCDE388BB60709495788DD4D1; affili_4267pv=ref=505467&subid=143559358131613405& date=2016-05-14&cltime=2016-05-14T20:51:44&linkType=4&linkNb=137&dt=64312646A07C5 16FCDE388BB60709495788DD4D1; affili_1332pv=ref=501528&subid=ALBF.DFNz.CEuH.o_bu YFNa53iOCYuSBx9Etw.Fd4.2&date=2016-05-17&cltime=2016-05-17T15:58:58&linkType=1&linkNb=310; affili_7520pv=ref=501528&subid=ALBF.DFOl.CBVR.1jvG HTda7soYTcA1lfWOKQ.Fd4.2&date=2016-05-17&cltime=2016-05-17T15:58:58&linkType=1&linkNb=10
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://banners.webmasterplan.com/pvdi.aspx?ref=501528&js=1&site=1332&b=310&subid=AL BF.DFNz.CEuH.o_buYFNa53iOCYuSBx9Etw.Fd4.2
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
user_prefs=sta44j1d7lY5BNvcKyAdMUDFBpBeA0fUm0NUbNi qNxp37H01yjaY2.rIN4WySXvOxwawpbT0iakA2zGUMnGWFfwMH DCQyFA2wv4qnvtCtfBIqupy34iEzIlnXRcW1F7T9qQtEwJ3s7B q8pYMnGWewizjsqnavtKugaNDCoPMUbJlpMpwoNSUC56MnGWpw oNN5uQ32SCVcF82qHQgN.1rATMB5P_dhre9zH_y3Cmke2TJ6Lx p4nN_n_5cVkKMLy.25.ea1mtanJF0iwdbtinwlfe2Rg9Vr_H5v 23HSYKwy8JQlewc4ZfX8DleyTxbkfreCDbk1zUsf4jlLnU8zXV z_rnjUDFBpBeDTL5nglripjlRiwerbXh8bTg_RCQwMAj9htsfH OrychjqsGrfpDnaQQKnreCDbk6z_n_LHi8hzEfpDnaQQKnreCD bEzZXYXvOxxldy26urQYjwjSvIiULtLM76rwOzye_52QKmSh_x HI0njVwzvfx5Lbsnbsf4jxLAUEEnz4jK_0h8rULvBprkQyTgHs XUPPOs9L8bqy11WyRRvSiwwe98vDdYeDfvIgtVqpRDL8TKubOn ChesgHsDXA3jESUOfiOYjSeALwQGqoyy2reCDbk1zTg_R0htVW udAakA2wv4qnwQZvQAriZywQxuYIdw0ztwyxyLfPduszMlxShK htCjemKkyJIaPC8xyRXXD3NlY52CDPg37lYfs.DQE
========================================
Локальное время:17.05.2016 15:59:55
Время сессии: 01:24:09
Время отчета: 17.05.2016 13:59:42
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://banners.webmasterplan.com/pvdi.aspx?ref=501528&js=1&site=7520&b=10&subid=ALB F.DFOl.CBVR.1jvGHTda7soYTcA1lfWOKQ.Fd4.2&pvDiDone= 1
Тип: HTTPS запрос
Размер (байты): 2 148
----------------------------------------
https://banners.webmasterplan.com/pvdi.aspx?ref=501528&js=1&site=7520&b=10&subid=ALB F.DFOl.CBVR.1jvGHTda7soYTcA1lfWOKQ.Fd4.2&pvDiDone= 1
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: affili_0=uid=ahhwdqru0yqo2q5f4wsimc4v&cookieId=029 73dae-6e91-43b1-aae9-967e4a1eb015&date=2016-05-17T15:58:58; affili_4655pv=ref=501528&subid=ALBF.DFN_.B_cx.F56u aBZpsHHjamFRUSjFzg.Fd4.2&date=2016-05-17&cltime=2016-05-17T15:58:58&oldcltime=2016-05-11T21:53:26&linkType=1&linkNb=509&dt=64312646A07C5 16FCDE388BB60709495788DD4D1; affili_4267pv=ref=505467&subid=143559358131613405& date=2016-05-14&cltime=2016-05-14T20:51:44&linkType=4&linkNb=137&dt=64312646A07C5 16FCDE388BB60709495788DD4D1; affili_1332pv=ref=501528&subid=ALBF.DFNz.CEuH.o_bu YFNa53iOCYuSBx9Etw.Fd4.2&date=2016-05-17&cltime=2016-05-17T15:58:58&linkType=1&linkNb=310; affili_7520pv=ref=501528&subid=ALBF.DFOl.CBVR.1jvG HTda7soYTcA1lfWOKQ.Fd4.2&date=2016-05-17&cltime=2016-05-17T15:58:58&linkType=1&linkNb=10
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://banners.webmasterplan.com/pvdi.aspx?ref=501528&js=1&site=7520&b=10&subid=ALB F.DFOl.CBVR.1jvGHTda7soYTcA1lfWOKQ.Fd4.2
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
user_prefs=kta44j1d7lY5BNvcKyAdMUDFBpBeA0fUm0NUbNi qNxp37H01yjaY2.rIN4WySXvOxwawpbT0iakA2zGUMnGWFfwMH DCQyFA2wv4qnvtCtfBIqupy34iEzIlnXRcW1F7T9qQtEwJ3s7B q8pYMnGWewizjsqnavtKugaNDCoPMUbJlpMpwoNSUC56MnGWpw oNN5uQ32SCVcF82qHQgPJdQ_jAa2CHoqvp4UdHz15tNK0j92fT uXtgHtmYJFNAqjV.lV9dVgiOgp3.Qj9OyQgzBPuVrA1cCtJWik l3bNpUEXK5wPj90O9sXIgPjbjOw9xuYIdw.jry9lQwKgrmUscE tSwvrnZ2CI9Yb_WgvBSvhQwMAj9htsfHOrf8M2Lz4mvmfTT9oa SzeAQxi3SuxIgtaqpRxuYIdw0ztRtKZfXQUnuxIgtaqpRxuYId nzt7csiqUURPUVlyhqsvzArTovbpiK_m0xz5UzedGVqpRbQOUJ ZkRvsEEyuzG_dyBty9lQzKXrnnwzlQpOFQHSrpinCSw5zbf3i7 bqaaT1_XOxjVVcUb6DrQjE9XXTneNuYeyovDNChM2_XM_TdqRn QPiA3i2cXlAnrMqPvaNvrPXpj5oShEjVxuYIdw.jrf8M.QTN7T eHtg1kzDlSgz5tDqmxvdEj5zTcouU.UyUEjU_eqeTiEpwUMQKQ TIQug_RE_3taYHUUb7cYW5BNlVnIaf01BNuy..pd
========================================
Локальное время:17.05.2016 15:59:55
Время сессии: 01:24:09
Время отчета: 17.05.2016 13:59:42
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://banners.webmasterplan.com/pvdi.aspx?ref=501528&js=1&site=4655&b=509&subid=AL BF.DFN_.B_cx.F56uaBZpsHHjamFRUSjFzg.Fd4.2&pvDiDone =1
Тип: HTTPS запрос
Размер (байты): 2 150
----------------------------------------
https://banners.webmasterplan.com/pvdi.aspx?ref=501528&js=1&site=4655&b=509&subid=AL BF.DFN_.B_cx.F56uaBZpsHHjamFRUSjFzg.Fd4.2&pvDiDone =1
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: affili_0=uid=ahhwdqru0yqo2q5f4wsimc4v&cookieId=029 73dae-6e91-43b1-aae9-967e4a1eb015&date=2016-05-17T15:58:58; affili_4655pv=ref=501528&subid=ALBF.DFN_.B_cx.F56u aBZpsHHjamFRUSjFzg.Fd4.2&date=2016-05-17&cltime=2016-05-17T15:58:58&oldcltime=2016-05-11T21:53:26&linkType=1&linkNb=509&dt=64312646A07C5 16FCDE388BB60709495788DD4D1; affili_4267pv=ref=505467&subid=143559358131613405& date=2016-05-14&cltime=2016-05-14T20:51:44&linkType=4&linkNb=137&dt=64312646A07C5 16FCDE388BB60709495788DD4D1; affili_1332pv=ref=501528&subid=ALBF.DFNz.CEuH.o_bu YFNa53iOCYuSBx9Etw.Fd4.2&date=2016-05-17&cltime=2016-05-17T15:58:58&linkType=1&linkNb=310; affili_7520pv=ref=501528&subid=ALBF.DFOl.CBVR.1jvG HTda7soYTcA1lfWOKQ.Fd4.2&date=2016-05-17&cltime=2016-05-17T15:58:58&linkType=1&linkNb=10
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://banners.webmasterplan.com/pvdi.aspx?ref=501528&js=1&site=4655&b=509&subid=AL BF.DFN_.B_cx.F56uaBZpsHHjamFRUSjFzg.Fd4.2
User input: 2 2 d Hallo Dennis < ,nun habe ich es nocheinmal anders versucht.Vielef<< leicht gelingt es Dir diesmal den Anhang zu offe<nen.Alles Gur<te <, Lothar.
POST data:
user_prefs=kta44j1d7lY5BNvcKyAdMUDFBpBeA0fUm0NUbNi qNxp37H01yjaY2.rIN4WySXvOxwawpbT0iakA2zGUMnGWFfwMH DCQyFA2wv4qnvtCtfBIqupy34iEzIlnXRcW1F7T9qQtEwJ3s7B q8pYMnGWewizjsqnavtKugaNDCoPMUbJlpMpwoNSUC56MnGWpw oNN5uQ32SCVcF82qHQgPJmQ_jAa2CHoqvp4UdHz15tNK0j92fT uXtgHtmYJFNJey.25.ea1mtanJF0iwdbtinwlfe2Rg9Vr_H5v2 3HSYKwy8JQlewc4ZfX8DleyTxbkfreCDbk1zUsf4jlLnU8zXVz _rnjUDFBpBeDTL5nglripjlRiwerbXh8bTg_RCQwMAj9htsfHO rychjqsGrfpDnaQQKnreCDbk6z_n_LHi8hzEfpDnaQQKnreCDb EzZXYXvOxxldy26urQYjwjSvIiULtLM76rwOzye_52QKmSh_xH I0njVwzvfx5Lbsnbsf4jxLAUEEnz4jK_0h8rULvBprkQyTgHsX UPPOs9L8bqy11WyRRvSiwwe98vDdYeDfvIgtVqpRDL8TKubOnC hesgHsDXA3jESUOfiOYjSeALwQGqoyy2reCDbk1zTg_R0htVWu dAakA2wv4qnwQZvQAriZywQxuYIdw0ztwyxyLfPduszMlxShKh tCjemKkyJIaPC8xyRXXD3NlY52CDPg37lYfs.Aok
======================================== 18.05.2016 ========================================
========================================
Bot ID: MD_8830_7875768FE856ABD9
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1031
Локальное время:18.05.2016 13:46:51
GMT: +2:00
Время сессии: 00:20:29
Время отчета: 18.05.2016 11:46:05
Страна: DE
IPv4: 84.134.179.186
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://rover.ebay.com/ar/1/707-220017-51195-17/4?mpt=[CACHEBUSTER]&siteid=77&adtype=0&size=1x1&ipn=admain2&placement =436893&mpvc=
Тип: HTTPS запрос
Размер (байты): 712
----------------------------------------
https://rover.ebay.com/ar/1/707-220017-51195-17/4?mpt=[CACHEBUSTER]&siteid=77&adtype=0&size=1x1&ipn=admain2&placement =436893&mpvc=
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: npii=btrm/svid%3D870503335360639058591c571a^tguid/57eaba7c1540a602ef17d177fed30f67591c571a^cguid/57eaba7c1540a602ef17d177fed30f66591c571a^; dp1=bu1p/QEBfX0BAX19AQA**5919c9d6^bl/DE5afafd56^; nonsession=CgADLAAFXOJ1eMwDKACBgnpfWNTdlYWJhN2MxNT QwYTYwMmVmMTdkMTc3ZmVkMzBmNjc+0oXJ
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://fssecure.t-online.de/partner/startseite/76107838.html
User input: t-online.de login r
POST data:
*EMPTY*
========================================
Локальное время:18.05.2016 13:50:45
Время сессии: 00:24:23
Время отчета: 18.05.2016 11:52:40
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://accounts.login.idm.telekom.com/sso
Тип: HTTPS запрос
Размер (байты): 1 926
----------------------------------------
https://accounts.login.idm.telekom.com/sso
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: syco=cGkwJQ41ZFUK10KkgmfJPMWp; utag_main=v_id:0154772cd15c008257455165c7a01504100 4900d00718$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1462290238530$ses_id:1462288306524%3Be xp-session; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; TA12d238e0-1cee-11e6-a962-ac162d727941=CgRrZXkxEhRpj24IYWG0r8hBhOMHZ_wIzdcul RrABGYnwGu7xrGhBSMFGH9nH1xRdpjVbEftVWUgGqafZlJjjvT 5W5UuxJcJIccUSAJWspFQS_Yq9OS3xjaSG_Cg5P1cBZ5YLDY0A g2RyhCUyXWaTa1tKAoAeeVuGeC7CRH3ytXLqYy3BnBhQudlC11 rHx4hIRwnSZjY7bnbVjIubfYpAjNUd7UXmZa-9aWBJ4nwpfDerYtrqid0Pkkw0Gp1asjWeKOChz2FGaYHTceG0G 2ATUQxQHUeIIdTkjy75iNaLUqYfSpVpDy_ox_V8CaXybCO8y5y y6VpP5M0dSgrHf0ZNeX3BUNQjYaIAI2utpeTxBAMWbltpThQ9g M4a1loxL9FL9QvYea0CQYg7JbIqdEHpG4keysEaRtaESeWQDrz tzWXWPRbMPv2OHPjluGv1iuIAbAlGUYG1T_XqtOjC6hR8o9e0R BioPJmzX854cPMqTZGyQmPeN9UlsJdVVVqpC6eH0V42DIzBQVj Nx95iYQUJSaf8MSM7xYvv2DXzCFi6sbP_u1k6sz1dDDuaiWB5t 2oTtdJ8Rw8ZgME42CWIDu_57LWTzhJDo4WUSu-mJRhlm1CeopbjebhtjmH6Wpi4u-ijMYHD3K-ySoyy8ooi0eB5xR3hDCQ6rwYJB7moyb-Fd3dMxBWW6LHDD_9O39kQnTQnjGZJdkC5hViOg1mOnzxsGYI51 pfuU4vSiTrw2M3mywCTHvBT-Ce23Na66b3C2b0GL2pBtqGt9UEYBt3jZ6AMdM1W6nFvr4fb5V2 voQRBQ
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://accounts.login.idm.telekom.com/oic?response_type=code&client_id=10LIVESAM30000004 901CMP00000000000000000&scope=openid&redirect_uri= https%3A%2F%2Femail.t-online.de%2F%3Fpf%3D%2Fem&logout_uri=https%3A%2F%2 Femail.t-online.de%2Fem%2Fbin%2Fsession%2Fdestroysession&x-skingroupid=email&claims=%7B%22id_token%22%3A%7B%2 2urn%3Atelekom.com%3Aall%22%3Anull%7D%7D
User input: t-online.de login regina.uibel@t- online.deKocharena1236987
POST data:
tid=0bab02db-2a95-4e9d-8110-449bd976874d
pw_domt=t-online.de
pw_usr=regina.uibel%40t-online.de
persist_session=1
pw_pwd=Kocharena1236987
pw_submit=
========================================
Локальное время:18.05.2016 13:50:49
Время сессии: 00:24:27
Время отчета: 18.05.2016 11:52:41
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.settings/setuserdatavalues
Тип: HTTPS запрос
Размер (байты): 4 093
----------------------------------------
https://email.t-online.de/em/srv/service.settings/setuserdatavalues
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9977; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=6w8o59528a3nk4jti64hys944xnxmcwj.19; lblm=a; lisaCD=1; wetterim=weatherdata:tmax:20:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:31.2:rainProb:55.7:locatio n:uni:K05913000:zip:null:city:null; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987
POST data:
values%5Blisa.global.lastlogin.timestamp%5D=146357 2249
========================================
Локальное время:18.05.2016 13:50:50
Время сессии: 00:24:28
Время отчета: 18.05.2016 11:52:41
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 363
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9977; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:33$_ss:1$_st:1463490642196$_pn:1%3B exp-session$ses_id:1463488842196%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=6w8o59528a3nk4jti64hys944xnxmcwj.19; lblm=a; lisaCD=1; wetterim=weatherdata:tmax:20:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:31.2:rainProb:55.7:locatio n:uni:K05913000:zip:null:city:null; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987
POST data:
messageXguidList%5BINBOX%5D%5B121558993912610%5D=1 21558993912610
messageXguidList%5BINBOX%5D%5B121558993912510%5D=1 21558993912510
messageXguidList%5BINBOX%5D%5B121558993912410%5D=1 21558993912410
messageXguidList%5BINBOX%5D%5B121558993912310%5D=1 21558993912310
messageXguidList%5BINBOX%5D%5B121558993912210%5D=1 21558993912210
========================================
Локальное время:18.05.2016 13:51:03
Время сессии: 00:24:40
Время отчета: 18.05.2016 11:52:41
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 4 163
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9977; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=6w8o59528a3nk4jti64hys944xnxmcwj.19; lblm=a; lisaCD=1; wetterim=weatherdata:tmax:20:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:31.2:rainProb:55.7:locatio n:uni:K05913000:zip:null:city:null; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987
POST data:
messageId=121558993912610
folderId=INBOX
nextMsgId=121558993912510
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:18.05.2016 13:51:04
Время сессии: 00:24:41
Время отчета: 18.05.2016 11:52:42
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 4 129
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9977; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=6w8o59528a3nk4jti64hys944xnxmcwj.19; lblm=a; lisaCD=1; wetterim=weatherdata:tmax:20:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:31.2:rainProb:55.7:locatio n:uni:K05913000:zip:null:city:null; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987
POST data:
email=QVC_Kundenservice_bitte_nicht_antworten%40qv c.de
========================================
Локальное время:18.05.2016 13:51:50
Время сессии: 00:25:28
Время отчета: 18.05.2016 11:52:42
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 216
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9977; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=6w8o59528a3nk4jti64hys944xnxmcwj.19; lblm=a; lisaCD=1; wetterim=weatherdata:tmax:20:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:31.2:rainProb:55.7:locatio n:uni:K05913000:zip:null:city:null; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:18.05.2016 13:53:49
Время сессии: 00:27:27
Время отчета: 18.05.2016 11:56:00
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 223
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9977; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=6w8o59528a3nk4jti64hys944xnxmcwj.19; lblm=a; lisaCD=1; wetterim=weatherdata:tmax:20:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:31.2:rainProb:55.7:locatio n:uni:K05913000:zip:null:city:null; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:18.05.2016 13:54:09
Время сессии: 00:27:47
Время отчета: 18.05.2016 11:56:00
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.myhermes.de/wps/portal/paket/Home/privatkunden/sendungsverfolgung/!ut/p/b1/04_SjzQ2NDc2MbO0NNOP0I_KSyzLTE8syczPS8wB8aPM4t2NDU IdnQwdDfz9As0MPANcPA3cLU2N3M2NgQoiURT4BDsBFTh7hToG-BkY-JoTp98AB3A0IKTfSz8qPSc_CejUcP0ovIqDzDEUYDoWrACPa_w 88nNT9XOjctwssjMD0h0VFQE6xv7M/dl4/d5/L2dBISEvZ0FBIS9nQSEh/pw/Z7_G30UAB1A0ONQ60IPDI0G952GN2/act/id=0/p=javax.portlet.action=traceViaShipmentId/324823971419/-/
Тип: HTTPS запрос
Размер (байты): 1 646
----------------------------------------
https://www.myhermes.de/wps/portal/paket/Home/privatkunden/sendungsverfolgung/!ut/p/b1/04_SjzQ2NDc2MbO0NNOP0I_KSyzLTE8syczPS8wB8aPM4t2NDU IdnQwdDfz9As0MPANcPA3cLU2N3M2NgQoiURT4BDsBFTh7hToG-BkY-JoTp98AB3A0IKTfSz8qPSc_CejUcP0ovIqDzDEUYDoWrACPa_w 88nNT9XOjctwssjMD0h0VFQE6xv7M/dl4/d5/L2dBISEvZ0FBIS9nQSEh/pw/Z7_G30UAB1A0ONQ60IPDI0G952GN2/act/id=0/p=javax.portlet.action=traceViaShipmentId/324823971419/-/
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; JSESSIONID=00001vIvfwSA17kFtAZxAGoWh8o:169ev1vn7; BIGipServerps-www.myhermes.de-pool=3730745536.20480.0000; __utma=162290848.1299197800.1463572429.1463572429. 1463572429.1; __utmb=162290848; __utmc=162290848; __utmz=162290848.1463572429.1.1.utmccn=(referral)| utmcsr=int.search.myway.com|utmcct=/search/GGmain.jhtml|utmcmd=referral
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.myhermes.de/wps/portal/paket/Home/privatkunden/sendungsverfolgung
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes
POST data:
shipmentID=92138119113418
traceViaShipmentId=Sendung verfolgen
========================================
Локальное время:18.05.2016 14:34:50
Время сессии: 01:08:28
Время отчета: 18.05.2016 12:35:48
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 232
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9977; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=6w8o59528a3nk4jti64hys944xnxmcwj.19; lblm=a; lisaCD=1; wetterim=weatherdata:tmax:20:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:31.2:rainProb:55.7:locatio n:uni:K05913000:zip:null:city:null; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkass
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:18.05.2016 14:35:50
Время сессии: 01:09:28
Время отчета: 18.05.2016 12:35:48
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 272
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9977; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=6w8o59528a3nk4jti64hys944xnxmcwj.19; lblm=a; lisaCD=1; wetterim=weatherdata:tmax:20:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:31.2:rainProb:55.7:locatio n:uni:K05913000:zip:null:city:null; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkasse Bielefeld Se<EPA-Uberweisungen ,
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:18.05.2016 14:36:50
Время сессии: 01:10:28
Время отчета: 18.05.2016 12:38:49
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 317
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9977; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=6w8o59528a3nk4jti64hys944xnxmcwj.19; lblm=a; lisaCD=1; wetterim=weatherdata:tmax:20:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:31.2:rainProb:55.7:locatio n:uni:K05913000:zip:null:city:null; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkasse Bielefeld Se<EPA-Uberweisungen , <<<< , ausfullen Sparkasse Bielefeld
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:18.05.2016 14:37:50
Время сессии: 01:11:28
Время отчета: 18.05.2016 12:38:49
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 339
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9977; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=6w8o59528a3nk4jti64hys944xnxmcwj.19; lblm=a; lisaCD=1; wetterim=weatherdata:tmax:20:tmin:11:temp:17:symb: 2:rain:0:wstre:2:wspmax:31.2:rainProb:55.7:locatio n:uni:K05913000:zip:null:city:null; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkasse Bielefeld Se<EPA-Uberweisungen , <<<< , ausfullen Sparkasse Bielefeld , SEPA-Uberweisungen
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:18.05.2016 14:47:50
Время сессии: 01:21:28
Время отчета: 18.05.2016 12:47:53
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 238
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9977; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lisid=6w8o59528a3nk4jti64hys944xnxmcwj.19; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkasse Bielefeld Se<EPA-Uberweisungen , <<<< , ausfullen Sparkasse Bielefeld , SEPA-Uberweisungen
POST data:
lastReceivedMail%5Buid%5D=121558993912610
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=d54f3be862a9c0 6b8c94245e540be63b
========================================
Локальное время:18.05.2016 15:19:53
Время сессии: 01:53:31
Время отчета: 18.05.2016 13:20:55
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/movemessages
Тип: HTTPS запрос
Размер (байты): 4 153
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/movemessages
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=3964; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; lisid=iatk7w00z3wa6t18z1zd5cu7ugfxmtsu.19; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkasse Bielefeld Se<EPA-Uberweisungen , <<<< , ausfullen Sparkasse Bielefeld , SEPA-Uberweisungen
POST data:
sourceFolderMessages%5BINBOX%5D=121558993912510
targetFolder=INBOX.Trash
========================================
Локальное время:18.05.2016 15:19:54
Время сессии: 01:53:31
Время отчета: 18.05.2016 13:20:55
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfolders
Тип: HTTPS запрос
Размер (байты): 4 105
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfolders
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=3964; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; lisid=iatk7w00z3wa6t18z1zd5cu7ugfxmtsu.19; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkasse Bielefeld Se<EPA-Uberweisungen , <<<< , ausfullen Sparkasse Bielefeld , SEPA-Uberweisungen
POST data:
simplifyAlpsStructure=true
========================================
Локальное время:18.05.2016 15:20:00
Время сессии: 01:53:37
Время отчета: 18.05.2016 13:20:56
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 411
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=3964; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; lisid=iatk7w00z3wa6t18z1zd5cu7ugfxmtsu.19; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkasse Bielefeld Se<EPA-Uberweisungen , <<<< , ausfullen Sparkasse Bielefeld , SEPA-Uberweisungen
POST data:
messageXguidList%5BINBOX%5D%5B121558993912110%5D=1 21558993912110
messageXguidList%5BINBOX%5D%5B121558993912010%5D=1 21558993912010
messageXguidList%5BINBOX%5D%5B121558993911910%5D=1 21558993911910
messageXguidList%5BINBOX%5D%5B121558993911810%5D=1 21558993911810
messageXguidList%5BINBOX%5D%5B121558993911710%5D=1 21558993911710
========================================
Локальное время:18.05.2016 15:20:02
Время сессии: 01:53:40
Время отчета: 18.05.2016 13:20:56
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/movemessages
Тип: HTTPS запрос
Размер (байты): 4 153
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/movemessages
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=3964; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; lisid=iatk7w00z3wa6t18z1zd5cu7ugfxmtsu.19; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkasse Bielefeld Se<EPA-Uberweisungen , <<<< , ausfullen Sparkasse Bielefeld , SEPA-Uberweisungen
POST data:
sourceFolderMessages%5BINBOX%5D=121558993912410
targetFolder=INBOX.Trash
========================================
Локальное время:18.05.2016 15:20:08
Время сессии: 01:53:45
Время отчета: 18.05.2016 13:20:57
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/movemessages
Тип: HTTPS запрос
Размер (байты): 4 153
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/movemessages
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=3964; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoyLCJwbF90LW9ubGluZS10ZWFzZXI4IjoyLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM1NzE5NTUsInBsX3Qtb25saW5lLXRlY XNlcjYiOjMsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6MX0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A11999|A12003|A13640 |A13649|A13650|A13054|A11639|A13644|A13561|A13612| A13168|A13623|A13630|A13631|A13517|A13541|A11627|A 13620|A13521|A11603|A11614|A11620|A11628|A11631|A1 1633|A11635|A13484|A11656|A13125|A11666|A11668|A11 677|A12087|A13132|A12602|A13159|A13251|B10072|A142 58|A14173|A14233|A14246|A14174|A14169|A14167|A1428 0|A14251|A14185|A14281|A13981|A14103|A14406|A14418 |A14524|B0; XADP=CAT,e0,e24,e7,e8,ea,ed,eq,e1l,e1m,e1o,e1p,e1q ,e1r,e3b,e3u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e 4y,e2c,e1,e4b,e4i,e20,e38,e39,e3f,e3n,e56,e58,e5e, e5f,e5m,e5n,e5o,e5p,e5q,e5r,e60,e6b,e63,e64,e6a,e6 e,e6f,e6i,e6l,e6q,e6y,e75,e76,e7l,e71,e7s,e7t,e7m, e7p,e7w,e82,e8e,e9h,e8y,ea0,ea1,ead,ea7,BS_CBSRCBs JZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:34$_ss:1$_st:1463574052967$_pn:1%3B exp-session$ses_id:1463572252967%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A11999,A12003,A13640,A1364 9,A13650,A13054,A11639,A13644,A13561,A13612,A13168 ,A13623,A13630,A13631,A13517,A13541,A11627,A13620, A13521,A11603,A11614,A11620,A11628,A11631,A11633,A 11635,A13484,A11656,A13125,A11666,A11668,A11677,A1 2087,A13132,A12602,A13159,A13251,B10072,A14258,A14 173,A14233,A14246,A14174,A14169,A14167,A14280,A142 51,A14185,A14281,A13981,A14103,A14406,A14418,A1452 4,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; crt_to205=1; criteo350hpa=1; criteo450hpa=1; lisid=iatk7w00z3wa6t18z1zd5cu7ugfxmtsu.19; lblm=a; lisaCD=1; msglist-sortandfilter=sentDate%7Cdesc%7Call; lisaMailtoReg=1; lisaCssPropertyMask=1111111; POPUPCHECK=1463658651191; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkasse Bielefeld Se<EPA-Uberweisungen , <<<< , ausfullen Sparkasse Bielefeld , SEPA-Uberweisungen
POST data:
sourceFolderMessages%5BINBOX%5D=121558993912310
targetFolder=INBOX.Trash
========================================
Локальное время:18.05.2016 15:21:17
Время сессии: 01:54:55
Время отчета: 18.05.2016 13:20:58
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.magentacloud.de/api/share/token
Тип: HTTPS запрос
Размер (байты): 1 175
----------------------------------------
https://www.magentacloud.de/api/share/token
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: utag_main=v_id:0154bec21669000a7549402282f91504100 2f00d00718$_sn:3$_ss:1$_st:1463579476766$_pn:1%3Be xp-session$ses_id:1463577676687%3Bexp-session; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.magentacloud.de/share/yrv74s-2.4
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkasse Bielefeld Se<EPA-Uberweisungen , <<<< , ausfullen Sparkasse Bielefeld , SEPA-Uberweisungen
POST data:
id=yrv74s-2.4
========================================
Локальное время:18.05.2016 15:21:17
Время сессии: 01:54:55
Время отчета: 18.05.2016 13:20:58
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://www.magentacloud.de/api/dir?path=/&fields=id%2Cpath%2Cwritable%2Cmembers.id%2Cmember s.parent_id%2Cmembers.name%2Cmembers.mtime%2Cmembe rs.path%2Cmembers.readable%2Cmembers.type%2Cmember s.image.width%2Cmembers.image.height%2Cmembers.siz e&members=all&limit=0%2C5000
Тип: HTTPS запрос
Размер (байты): 1 463
----------------------------------------
https://www.magentacloud.de/api/dir?path=/&fields=id%2Cpath%2Cwritable%2Cmembers.id%2Cmember s.parent_id%2Cmembers.name%2Cmembers.mtime%2Cmembe rs.path%2Cmembers.readable%2Cmembers.type%2Cmember s.image.width%2Cmembers.image.height%2Cmembers.siz e&members=all&limit=0%2C5000
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: utag_main=v_id:0154bec21669000a7549402282f91504100 2f00d00718$_sn:3$_ss:1$_st:1463579476766$_pn:1%3Be xp-session$ses_id:1463577676687%3Bexp-session; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://www.magentacloud.de/share/yrv74s-2.4
User input: t-online.de login regina.uibel@t- online.deKocharena1236987 Hermes Sparkasse Bielefeld Se<EPA-Uberweisungen , <<<< , ausfullen Sparkasse Bielefeld , SEPA-Uberweisungen
HTTP authentication (encoded): Bearer bVowS25yZEhQWVZQSHZlTWlhTno=
POST data:
*EMPTY*
======================================== 19.05.2016 ========================================
По указанному фильтру отчетов на эту дату не найдено.
======================================== 20.05.2016 ========================================
========================================
Bot ID: MD_8830_7875768FE856ABD9
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1031
Локальное время:20.05.2016 16:48:05
GMT: +2:00
Время сессии: 02:41:14
Время отчета: 20.05.2016 14:49:46
Страна: ??
IPv4: 84.134.179.186
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 783
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9894; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoxLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM3NTAzNjQsInBsX3Qtb25saW5lLXRlY XNlcjYiOjEsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6NH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A12003|A13640|A13649 |A13650|A13054|A11639|A13644|A13561|A13612|A13168| A13623|A13630|A13631|A13517|A13541|A11627|A13620|A 13521|A11522|A11603|A11614|A11617|A11620|A11628|A1 1631|A13485|A11656|A11666|A11668|A11677|A11993|A11 971|A11990|A12087|A12588|A12595|A13132|A12602|A130 16|A13159|A13251|B10072|A14258|A14173|A14233|A1424 6|A14174|A14169|A14167|A14280|A14282|A14251|A14185 |A14281|A13981|A13503|A14103|A14406|A14418|A14524| B0; XADP=CAT,e0,e24,e4,e6,e7,e8,ed,eq,e1g,e1h,e1i,e1j, e1k,e1l,e1m,e1o,e1p,e1q,e1r,e1s,e1t,e1u,e3a,e3b,e3 u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e4y,e2c,e1,e 4b,e4i,e20,e30,e33,e34,e39,e3l,e58,e5b,e5d,e5e,e5f ,e5g,e5h,e5i,e5j,e5k,e5l,e5m,e5n,e5o,e5p,e5q,e5r,e 5s,e5t,e5u,e5v,e5w,e6b,e63,e64,e67,e69,e6a,e6e,e6f ,e6i,e6l,e6q,e6x,e6y,e76,e79,e7h,e71,e74,e7m,e7p,e 7w,e80,e82,e8g,e9h,e8q,eae,ea0,ea1,ead,ea7,ea8,eab ,e5z,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:37$_ss:0$_st:1463752744215$_pn:2%3B exp-session$ses_id:1463750488844%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385%3 B149468763009048%7C2146375087800593914; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A12003,A13640,A13649,A1365 0,A13054,A11639,A13644,A13561,A13612,A13168,A13623 ,A13630,A13631,A13517,A13541,A11627,A13620,A13521, A11522,A11603,A11614,A11617,A11620,A11628,A11631,A 13485,A11656,A11666,A11668,A11677,A11993,A11971,A1 1990,A12087,A12588,A12595,A13132,A12602,A13016,A13 159,A13251,B10072,A14258,A14173,A14233,A14246,A141 74,A14169,A14167,A14280,A14282,A14251,A14185,A1428 1,A13981,A13503,A14103,A14406,A14418,A14524,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lblm=a; lisaCD=1; lisaMailtoReg=1; lisaCssPropertyMask=1111111; WW_ACURL=http://www.t-online.de/tv/webclips/spektakulaere-videos/id_77890424/fallschirmspringer-filmt-flugzeugcrash.html?vid=ap; lisid=a6biafafucsjepdu5yfdx0dv1vrdkct4.30; ab_last_folder_selected=V-ALL; ab_last_contact_detail_adid=2840918459; wt3_sid=%3B149468763009048; msglist-sortandfilter=sentDate%7Cdesc%7Call
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de lug regina .uibel @ t-online.de kocharena<<<<<<<<< kp<< Kocharena 1236987 lo d d [email protected] Lowe<<<oewe12369Arena 22 22 www.e<telekom.deei / http :// spee dport .ip einrichten
POST data:
lastReceivedMail%5Buid%5D=1260501210322110
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=24c183b411a907 75d0c23d13563da198
incomingStates%5BINBOX%5D%5Bchanged%5D=true
incomingStates%5BINBOX%5D%5BhasReceivedNewMail%5D= false
========================================
Локальное время:20.05.2016 16:56:05
Время сессии: 02:49:14
Время отчета: 20.05.2016 14:56:04
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 795
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9894; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoxLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM3NTAzNjQsInBsX3Qtb25saW5lLXRlY XNlcjYiOjEsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6NH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A12003|A13640|A13649 |A13650|A13054|A11639|A13644|A13561|A13612|A13168| A13623|A13630|A13631|A13517|A13541|A11627|A13620|A 13521|A11522|A11603|A11614|A11617|A11620|A11628|A1 1631|A13485|A11656|A11666|A11668|A11677|A11993|A11 971|A11990|A12087|A12588|A12595|A13132|A12602|A130 16|A13159|A13251|B10072|A14258|A14173|A14233|A1424 6|A14174|A14169|A14167|A14280|A14282|A14251|A14185 |A14281|A13981|A13503|A14103|A14406|A14418|A14524| B0; XADP=CAT,e0,e24,e4,e6,e7,e8,ed,eq,e1g,e1h,e1i,e1j, e1k,e1l,e1m,e1o,e1p,e1q,e1r,e1s,e1t,e1u,e3a,e3b,e3 u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e4y,e2c,e1,e 4b,e4i,e20,e30,e33,e34,e39,e3l,e58,e5b,e5d,e5e,e5f ,e5g,e5h,e5i,e5j,e5k,e5l,e5m,e5n,e5o,e5p,e5q,e5r,e 5s,e5t,e5u,e5v,e5w,e6b,e63,e64,e67,e69,e6a,e6e,e6f ,e6i,e6l,e6q,e6x,e6y,e76,e79,e7h,e71,e74,e7m,e7p,e 7w,e80,e82,e8g,e9h,e8q,eae,ea0,ea1,ead,ea7,ea8,eab ,e5z,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:37$_ss:0$_st:1463752744215$_pn:2%3B exp-session$ses_id:1463750488844%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385%3 B149468763009048%7C2146375087800593914; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A12003,A13640,A13649,A1365 0,A13054,A11639,A13644,A13561,A13612,A13168,A13623 ,A13630,A13631,A13517,A13541,A11627,A13620,A13521, A11522,A11603,A11614,A11617,A11620,A11628,A11631,A 13485,A11656,A11666,A11668,A11677,A11993,A11971,A1 1990,A12087,A12588,A12595,A13132,A12602,A13016,A13 159,A13251,B10072,A14258,A14173,A14233,A14246,A141 74,A14169,A14167,A14280,A14282,A14251,A14185,A1428 1,A13981,A13503,A14103,A14406,A14418,A14524,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lblm=a; lisaCD=1; lisaMailtoReg=1; lisaCssPropertyMask=1111111; WW_ACURL=http://www.t-online.de/tv/webclips/spektakulaere-videos/id_77890424/fallschirmspringer-filmt-flugzeugcrash.html?vid=ap; lisid=a6biafafucsjepdu5yfdx0dv1vrdkct4.30; ab_last_folder_selected=V-ALL; ab_last_contact_detail_adid=2840918459; wt3_sid=%3B149468763009048; msglist-sortandfilter=sentDate%7Cdesc%7Call
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de lug regina .uibel @ t-online.de kocharena<<<<<<<<< kp<< Kocharena 1236987 lo d d [email protected] Lowe<<<oewe12369Arena 22 22 www.e<telekom.deei / http :// spee dport .ip einrichten 192.168.2.1
POST data:
lastReceivedMail%5Buid%5D=1260501210322110
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=24c183b411a907 75d0c23d13563da198
incomingStates%5BINBOX%5D%5Bchanged%5D=true
incomingStates%5BINBOX%5D%5BhasReceivedNewMail%5D= false
========================================
Локальное время:20.05.2016 17:05:52
Время сессии: 02:59:01
Время отчета: 20.05.2016 15:05:07
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
Тип: HTTPS запрос
Размер (байты): 4 877
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getmessagemetadata
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9894; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoxLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM3NTAzNjQsInBsX3Qtb25saW5lLXRlY XNlcjYiOjEsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6NH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A12003|A13640|A13649 |A13650|A13054|A11639|A13644|A13561|A13612|A13168| A13623|A13630|A13631|A13517|A13541|A11627|A13620|A 13521|A11522|A11603|A11614|A11617|A11620|A11628|A1 1631|A13485|A11656|A11666|A11668|A11677|A11993|A11 971|A11990|A12087|A12588|A12595|A13132|A12602|A130 16|A13159|A13251|B10072|A14258|A14173|A14233|A1424 6|A14174|A14169|A14167|A14280|A14282|A14251|A14185 |A14281|A13981|A13503|A14103|A14406|A14418|A14524| B0; XADP=CAT,e0,e24,e4,e6,e7,e8,ed,eq,e1g,e1h,e1i,e1j, e1k,e1l,e1m,e1o,e1p,e1q,e1r,e1s,e1t,e1u,e3a,e3b,e3 u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e4y,e2c,e1,e 4b,e4i,e20,e30,e33,e34,e39,e3l,e58,e5b,e5d,e5e,e5f ,e5g,e5h,e5i,e5j,e5k,e5l,e5m,e5n,e5o,e5p,e5q,e5r,e 5s,e5t,e5u,e5v,e5w,e6b,e63,e64,e67,e69,e6a,e6e,e6f ,e6i,e6l,e6q,e6x,e6y,e76,e79,e7h,e71,e74,e7m,e7p,e 7w,e80,e82,e8g,e9h,e8q,eae,ea0,ea1,ead,ea7,ea8,eab ,e5z,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:37$_ss:0$_st:1463752744215$_pn:2%3B exp-session$ses_id:1463750488844%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385%3 B149468763009048%7C2146375087800593914; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A12003,A13640,A13649,A1365 0,A13054,A11639,A13644,A13561,A13612,A13168,A13623 ,A13630,A13631,A13517,A13541,A11627,A13620,A13521, A11522,A11603,A11614,A11617,A11620,A11628,A11631,A 13485,A11656,A11666,A11668,A11677,A11993,A11971,A1 1990,A12087,A12588,A12595,A13132,A12602,A13016,A13 159,A13251,B10072,A14258,A14173,A14233,A14246,A141 74,A14169,A14167,A14280,A14282,A14251,A14185,A1428 1,A13981,A13503,A14103,A14406,A14418,A14524,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lblm=a; lisaCD=1; lisaMailtoReg=1; lisaCssPropertyMask=1111111; WW_ACURL=http://www.t-online.de/tv/webclips/spektakulaere-videos/id_77890424/fallschirmspringer-filmt-flugzeugcrash.html?vid=ap; lisid=a6biafafucsjepdu5yfdx0dv1vrdkct4.30; ab_last_folder_selected=V-ALL; ab_last_contact_detail_adid=2840918459; wt3_sid=%3B149468763009048; msglist-sortandfilter=sentDate%7Cdesc%7Call
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de lug regina .uibel @ t-online.de kocharena<<<<<<<<< kp<< Kocharena 1236987 lo d d [email protected] Lowe<<<oewe12369Arena 22 22 www.e<telekom.deei / http :// spee dport .ip einrichten 192.168.2.1
POST data:
messageXguidList%5BINBOX%5D%5B1260501210322110%5D= 1260501210322110
messageXguidList%5BINBOX%5D%5B1260501210321910%5D= 1260501210321910
messageXguidList%5BINBOX%5D%5B1260501210322010%5D= 1260501210322010
messageXguidList%5BINBOX%5D%5B1260501210321810%5D= 1260501210321810
messageXguidList%5BINBOX%5D%5B1260501210321510%5D= 1260501210321510
========================================
Локальное время:20.05.2016 17:06:05
Время сессии: 02:59:14
Время отчета: 20.05.2016 15:08:07
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
Тип: HTTPS запрос
Размер (байты): 4 695
----------------------------------------
https://email.t-online.de/em/srv/service.mailbox/getfoldersincomingstate
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9894; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoxLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM3NTAzNjQsInBsX3Qtb25saW5lLXRlY XNlcjYiOjEsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6NH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A12003|A13640|A13649 |A13650|A13054|A11639|A13644|A13561|A13612|A13168| A13623|A13630|A13631|A13517|A13541|A11627|A13620|A 13521|A11522|A11603|A11614|A11617|A11620|A11628|A1 1631|A13485|A11656|A11666|A11668|A11677|A11993|A11 971|A11990|A12087|A12588|A12595|A13132|A12602|A130 16|A13159|A13251|B10072|A14258|A14173|A14233|A1424 6|A14174|A14169|A14167|A14280|A14282|A14251|A14185 |A14281|A13981|A13503|A14103|A14406|A14418|A14524| B0; XADP=CAT,e0,e24,e4,e6,e7,e8,ed,eq,e1g,e1h,e1i,e1j, e1k,e1l,e1m,e1o,e1p,e1q,e1r,e1s,e1t,e1u,e3a,e3b,e3 u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e4y,e2c,e1,e 4b,e4i,e20,e30,e33,e34,e39,e3l,e58,e5b,e5d,e5e,e5f ,e5g,e5h,e5i,e5j,e5k,e5l,e5m,e5n,e5o,e5p,e5q,e5r,e 5s,e5t,e5u,e5v,e5w,e6b,e63,e64,e67,e69,e6a,e6e,e6f ,e6i,e6l,e6q,e6x,e6y,e76,e79,e7h,e71,e74,e7m,e7p,e 7w,e80,e82,e8g,e9h,e8q,eae,ea0,ea1,ead,ea7,ea8,eab ,e5z,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:37$_ss:0$_st:1463752744215$_pn:2%3B exp-session$ses_id:1463750488844%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385%3 B149468763009048%7C2146375087800593914; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A12003,A13640,A13649,A1365 0,A13054,A11639,A13644,A13561,A13612,A13168,A13623 ,A13630,A13631,A13517,A13541,A11627,A13620,A13521, A11522,A11603,A11614,A11617,A11620,A11628,A11631,A 13485,A11656,A11666,A11668,A11677,A11993,A11971,A1 1990,A12087,A12588,A12595,A13132,A12602,A13016,A13 159,A13251,B10072,A14258,A14173,A14233,A14246,A141 74,A14169,A14167,A14280,A14282,A14251,A14185,A1428 1,A13981,A13503,A14103,A14406,A14418,A14524,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lblm=a; lisaCD=1; lisaMailtoReg=1; lisaCssPropertyMask=1111111; WW_ACURL=http://www.t-online.de/tv/webclips/spektakulaere-videos/id_77890424/fallschirmspringer-filmt-flugzeugcrash.html?vid=ap; lisid=a6biafafucsjepdu5yfdx0dv1vrdkct4.30; ab_last_folder_selected=V-ALL; ab_last_contact_detail_adid=2840918459; wt3_sid=%3B149468763009048; msglist-sortandfilter=sentDate%7Cdesc%7Call
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de lug regina .uibel @ t-online.de kocharena<<<<<<<<< kp<< Kocharena 1236987 lo d d [email protected] Lowe<<<oewe12369Arena 22 22 www.e<telekom.deei / http :// spee dport .ip einrichten 192.168.2.1
POST data:
lastReceivedMail%5Buid%5D=1260501210322110
lastReceivedMail%5BreceivedDate%5D=
incomingStates%5BINBOX%5D%5Bhash%5D=24c183b411a907 75d0c23d13563da198
========================================
Локальное время:20.05.2016 17:06:26
Время сессии: 02:59:35
Время отчета: 20.05.2016 15:08:07
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/page.inboxstart/readmessage
Тип: HTTPS запрос
Размер (байты): 4 670
----------------------------------------
https://email.t-online.de/em/srv/page.inboxstart/readmessage
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9894; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoxLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM3NTAzNjQsInBsX3Qtb25saW5lLXRlY XNlcjYiOjEsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6NH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A12003|A13640|A13649 |A13650|A13054|A11639|A13644|A13561|A13612|A13168| A13623|A13630|A13631|A13517|A13541|A11627|A13620|A 13521|A11522|A11603|A11614|A11617|A11620|A11628|A1 1631|A13485|A11656|A11666|A11668|A11677|A11993|A11 971|A11990|A12087|A12588|A12595|A13132|A12602|A130 16|A13159|A13251|B10072|A14258|A14173|A14233|A1424 6|A14174|A14169|A14167|A14280|A14282|A14251|A14185 |A14281|A13981|A13503|A14103|A14406|A14418|A14524| B0; XADP=CAT,e0,e24,e4,e6,e7,e8,ed,eq,e1g,e1h,e1i,e1j, e1k,e1l,e1m,e1o,e1p,e1q,e1r,e1s,e1t,e1u,e3a,e3b,e3 u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e4y,e2c,e1,e 4b,e4i,e20,e30,e33,e34,e39,e3l,e58,e5b,e5d,e5e,e5f ,e5g,e5h,e5i,e5j,e5k,e5l,e5m,e5n,e5o,e5p,e5q,e5r,e 5s,e5t,e5u,e5v,e5w,e6b,e63,e64,e67,e69,e6a,e6e,e6f ,e6i,e6l,e6q,e6x,e6y,e76,e79,e7h,e71,e74,e7m,e7p,e 7w,e80,e82,e8g,e9h,e8q,eae,ea0,ea1,ead,ea7,ea8,eab ,e5z,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:37$_ss:0$_st:1463752744215$_pn:2%3B exp-session$ses_id:1463750488844%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385%3 B149468763009048%7C2146375087800593914; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A12003,A13640,A13649,A1365 0,A13054,A11639,A13644,A13561,A13612,A13168,A13623 ,A13630,A13631,A13517,A13541,A11627,A13620,A13521, A11522,A11603,A11614,A11617,A11620,A11628,A11631,A 13485,A11656,A11666,A11668,A11677,A11993,A11971,A1 1990,A12087,A12588,A12595,A13132,A12602,A13016,A13 159,A13251,B10072,A14258,A14173,A14233,A14246,A141 74,A14169,A14167,A14280,A14282,A14251,A14185,A1428 1,A13981,A13503,A14103,A14406,A14418,A14524,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lblm=a; lisaCD=1; lisaMailtoReg=1; lisaCssPropertyMask=1111111; WW_ACURL=http://www.t-online.de/tv/webclips/spektakulaere-videos/id_77890424/fallschirmspringer-filmt-flugzeugcrash.html?vid=ap; lisid=a6biafafucsjepdu5yfdx0dv1vrdkct4.30; ab_last_folder_selected=V-ALL; ab_last_contact_detail_adid=2840918459; wt3_sid=%3B149468763009048; msglist-sortandfilter=sentDate%7Cdesc%7Call
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de lug regina .uibel @ t-online.de kocharena<<<<<<<<< kp<< Kocharena 1236987 lo d d [email protected] Lowe<<<oewe12369Arena 22 22 www.e<telekom.deei / http :// spee dport .ip einrichten 192.168.2.1
POST data:
messageId=1260501210321910
folderId=INBOX
prevMsgId=1260501210322110
nextMsgId=1260501210322010
preferredMainTextPartTypes%5B%5D=plain
========================================
Локальное время:20.05.2016 17:06:27
Время сессии: 02:59:36
Время отчета: 20.05.2016 15:08:07
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
Тип: HTTPS запрос
Размер (байты): 4 590
----------------------------------------
https://email.t-online.de/em/srv/service.addressbook/getcontactimagefromemail
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9894; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoxLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM3NTAzNjQsInBsX3Qtb25saW5lLXRlY XNlcjYiOjEsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6NH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A12003|A13640|A13649 |A13650|A13054|A11639|A13644|A13561|A13612|A13168| A13623|A13630|A13631|A13517|A13541|A11627|A13620|A 13521|A11522|A11603|A11614|A11617|A11620|A11628|A1 1631|A13485|A11656|A11666|A11668|A11677|A11993|A11 971|A11990|A12087|A12588|A12595|A13132|A12602|A130 16|A13159|A13251|B10072|A14258|A14173|A14233|A1424 6|A14174|A14169|A14167|A14280|A14282|A14251|A14185 |A14281|A13981|A13503|A14103|A14406|A14418|A14524| B0; XADP=CAT,e0,e24,e4,e6,e7,e8,ed,eq,e1g,e1h,e1i,e1j, e1k,e1l,e1m,e1o,e1p,e1q,e1r,e1s,e1t,e1u,e3a,e3b,e3 u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e4y,e2c,e1,e 4b,e4i,e20,e30,e33,e34,e39,e3l,e58,e5b,e5d,e5e,e5f ,e5g,e5h,e5i,e5j,e5k,e5l,e5m,e5n,e5o,e5p,e5q,e5r,e 5s,e5t,e5u,e5v,e5w,e6b,e63,e64,e67,e69,e6a,e6e,e6f ,e6i,e6l,e6q,e6x,e6y,e76,e79,e7h,e71,e74,e7m,e7p,e 7w,e80,e82,e8g,e9h,e8q,eae,ea0,ea1,ead,ea7,ea8,eab ,e5z,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:37$_ss:0$_st:1463752744215$_pn:2%3B exp-session$ses_id:1463750488844%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385%3 B149468763009048%7C2146375087800593914; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A12003,A13640,A13649,A1365 0,A13054,A11639,A13644,A13561,A13612,A13168,A13623 ,A13630,A13631,A13517,A13541,A11627,A13620,A13521, A11522,A11603,A11614,A11617,A11620,A11628,A11631,A 13485,A11656,A11666,A11668,A11677,A11993,A11971,A1 1990,A12087,A12588,A12595,A13132,A12602,A13016,A13 159,A13251,B10072,A14258,A14173,A14233,A14246,A141 74,A14169,A14167,A14280,A14282,A14251,A14185,A1428 1,A13981,A13503,A14103,A14406,A14418,A14524,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lblm=a; lisaCD=1; lisaMailtoReg=1; lisaCssPropertyMask=1111111; WW_ACURL=http://www.t-online.de/tv/webclips/spektakulaere-videos/id_77890424/fallschirmspringer-filmt-flugzeugcrash.html?vid=ap; lisid=a6biafafucsjepdu5yfdx0dv1vrdkct4.30; ab_last_folder_selected=V-ALL; ab_last_contact_detail_adid=2840918459; wt3_sid=%3B149468763009048; msglist-sortandfilter=sentDate%7Cdesc%7Call
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de lug regina .uibel @ t-online.de kocharena<<<<<<<<< kp<< Kocharena 1236987 lo d d [email protected] Lowe<<<oewe12369Arena 22 22 www.e<telekom.deei / http :// spee dport .ip einrichten 192.168.2.1
POST data:
email=office%40mail.computerwissen.de
========================================
Локальное время:20.05.2016 17:06:27
Время сессии: 02:59:36
Время отчета: 20.05.2016 15:08:08
Процесс: C:\Programme\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://email.t-online.de/em/srv/service.settings/setuserdatavalues
Тип: HTTPS запрос
Размер (байты): 4 593
----------------------------------------
https://email.t-online.de/em/srv/service.settings/setuserdatavalues
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: CNT=9894; _dtkc_de=X3RhcmdldHJAZHRrYw%3D%3DeyJkZWZhdWx0IjpbX SwiY250IjoxLCJwbF90LW9ubGluZS10ZWFzZXI4IjoxLCJsYXN 0UElEIjoidC1vbmxpbmUtdGVhc2VyNiIsInByb2R1Y3RSZWZlc nJhbHMiOnsiY291bnRlciI6eyJ0LW9ubGluZS10ZWFzZXI4Ijo wLCJ0LW9ubGluZS10ZWFzZXI2IjowLCJrY3N0YXJ0LXRlYXNlc jEiOjEsImtjc3RhcnQtdGVhc2VyMiI6MCwia2MtcmVjaG51bmc xIjowLCJrYy1yZWNobnVuZzIiOjAsImxvZ291dC1zZWl0ZS10Z WFzZXItMSI6MCwibG9nb3V0LXNlaXRlLXRlYXNlci0yIjowLCJ sb2dvdXQtc2VpdGUtdGVhc2VyLTMiOjAsImxvZ291dC1zZWl0Z S10ZWFzZXItNCI6MCwidC1vbmxpbmUtdGVhc2VyMyI6MH0sInB pZHMiOnsiT0YtMTAwNzEzMyI6WyJrYyJdLCJPRi0xMDA3MTM0I jpbImtjIl19fSwidGlkIjoiMTQ2MTc2Mzg3OTQ5MDUwMyIsImN oYW5nZWRhdGUiOjE0NjM3NTAzNjQsInBsX3Qtb25saW5lLXRlY XNlcjYiOjEsImtjIjpbIjg5ODQzMjc4IiwiODk3NTI5NjMiLCI 4OTc4NDM5NSIsIjg5NzUzODg3IiwiODk3MDY5NTEiLCI3NzcwM DAwNCIsIjQwMjgyMDQ3IiwiNjY2MDAwMDIiLCI2NjYwMDAwNyI sIjY2NjAwMDA5Il0sInBsX2tjc3RhcnQtdGVhc2VyMSI6MCwic Gxfa2NzdGFydC10ZWFzZXIyIjoxLCJwbF9rYy1yZWNobnVuZzE iOjAsInBsX2tjLXJlY2hudW5nMiI6MCwiZ2VvIjpbIjU1NSJdL CJwbF9sb2dvdXQtc2VpdGUtdGVhc2VyLTEiOjEsInBsX2xvZ29 1dC1zZWl0ZS10ZWFzZXItMiI6LTEsInBsX2xvZ291dC1zZWl0Z S10ZWFzZXItMyI6LTEsInBsX2xvZ291dC1zZWl0ZS10ZWFzZXI tNCI6MSwicGxfdC1vbmxpbmUtdGVhc2VyMyI6NH0%3D; wetterimuni=K05913000; CS1=2; JEB2=5720B7EF656416E958BC6AC3F19C3CBF; xtvrn=$496988$498121$463005$493772$453041$; xtan=-; xtant=1; rsi_segs=B10002|A13482|A12042|A12003|A13640|A13649 |A13650|A13054|A11639|A13644|A13561|A13612|A13168| A13623|A13630|A13631|A13517|A13541|A11627|A13620|A 13521|A11522|A11603|A11614|A11617|A11620|A11628|A1 1631|A13485|A11656|A11666|A11668|A11677|A11993|A11 971|A11990|A12087|A12588|A12595|A13132|A12602|A130 16|A13159|A13251|B10072|A14258|A14173|A14233|A1424 6|A14174|A14169|A14167|A14280|A14282|A14251|A14185 |A14281|A13981|A13503|A14103|A14406|A14418|A14524| B0; XADP=CAT,e0,e24,e4,e6,e7,e8,ed,eq,e1g,e1h,e1i,e1j, e1k,e1l,e1m,e1o,e1p,e1q,e1r,e1s,e1t,e1u,e3a,e3b,e3 u,e43,e44,e45,e49,e4h,e4l,e4s,e4w,e4x,e4y,e2c,e1,e 4b,e4i,e20,e30,e33,e34,e39,e3l,e58,e5b,e5d,e5e,e5f ,e5g,e5h,e5i,e5j,e5k,e5l,e5m,e5n,e5o,e5p,e5q,e5r,e 5s,e5t,e5u,e5v,e5w,e6b,e63,e64,e67,e69,e6a,e6e,e6f ,e6i,e6l,e6q,e6x,e6y,e76,e79,e7h,e71,e74,e7m,e7p,e 7w,e80,e82,e8g,e9h,e8q,eae,ea0,ea1,ead,ea7,ea8,eab ,e5z,BS_CBSRCBsJZWs_0Bsf-BiUABifkBDUFWSfABifABifABfrr; xtan498121=-; xtant498121=1; utag_main=v_id:015457ec171c001d132312e92c891504100 4100d00718$_sn:37$_ss:0$_st:1463752744215$_pn:2%3B exp-session$ses_id:1463750488844%3Bexp-session; crt_gfn500=0; xpl_im_telekom=1; wt3_eid=%3B196380495960676%7C4146228279300632385%3 B149468763009048%7C2146375087800593914; wt_cookiecontrol=1; gw=B10002,A13482,A12042,A12003,A13640,A13649,A1365 0,A13054,A11639,A13644,A13561,A13612,A13168,A13623 ,A13630,A13631,A13517,A13541,A11627,A13620,A13521, A11522,A11603,A11614,A11617,A11620,A11628,A11631,A 13485,A11656,A11666,A11668,A11677,A11993,A11971,A1 1990,A12087,A12588,A12595,A13132,A12602,A13016,A13 159,A13251,B10072,A14258,A14173,A14233,A14246,A141 74,A14169,A14167,A14280,A14282,A14251,A14185,A1428 1,A13981,A13503,A14103,A14406,A14418,A14524,B0; xtat=-; crt_toi140au=1; crt_toi_mrec=1; crt_205sb=1; crt_to450=1; kicker200=1; criteo205=1; Kicker110=1; criteo150m=1; criteo350hpa=1; criteo450hpa=1; mindsparktb_222097861=true; mindsparktbsupport_222097861=true; mindspark_extension_api_features_222097861=TOOLBAR _CLEANER; mindsparktb_224203885=true; mindsparktbsupport_224203885=true; mindspark_extension_api_features_224203885=TOOLBAR _CLEANER; mindsparktb_222529105=true; mindsparktbsupport_222529105=true; mindspark_extension_api_features_222529105=TOOLBAR _CLEANER; mindsparktb_226333724=true; mindsparktbsupport_226333724=true; mindspark_extension_api_features_226333724=TOOLBAR _CLEANER; lblm=a; lisaCD=1; lisaMailtoReg=1; lisaCssPropertyMask=1111111; WW_ACURL=http://www.t-online.de/tv/webclips/spektakulaere-videos/id_77890424/fallschirmspringer-filmt-flugzeugcrash.html?vid=ap; lisid=a6biafafucsjepdu5yfdx0dv1vrdkct4.30; ab_last_folder_selected=V-ALL; ab_last_contact_detail_adid=2840918459; wt3_sid=%3B149468763009048; msglist-sortandfilter=sentDate%7Cdesc%7Call
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://email.t-online.de/em
User input: t-online.de lug regina .uibel @ t-online.de kocharena<<<<<<<<< kp<< Kocharena 1236987 lo d d [email protected] Lowe<<<oewe12369Arena 22 22 www.e<telekom.deei / http :// spee dport .ip einrichten 192.168.2.1
POST data:
values%5Blisa.inbox.readmail.extended.enabled%5D=0
======================================== 21.05.2016 ========================================
По указанному фильтру отчетов на эту дату не найдено.
======================================== 22.05.2016 ========================================
По указанному фильтру отчетов на эту дату не найдено.
======================================== 23.05.2016 ========================================
По указанному фильтру отчетов на эту дату не найдено.
======================================== EOF ========================================
Добавлено через 1 минуту 37 секунд
Code:
======================================== 21.05.2016 ========================================
========================================
Bot ID: 6OB3KX6BLIAIXMN_E532648A02134BD8
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven, SP 1
Язык ОС: 1033
Локальное время:19.05.2016 18:24:09
GMT: +0:00
Время сессии: 08:57:36
Время отчета: 21.05.2016 04:48:52
Страна: ??
IPv4: 14.162.241.38
Процесс: C:\Windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Microsoft® Windows® Operating System | 6.1.7600.16385
Источник: http://amazon-e.bid/wp-rss/qsdlfkgjsl.php
Тип: HTTP запрос
Размер (байты): 177
----------------------------------------
http://amazon-e.bid/wp-rss/qsdlfkgjsl.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input: ta uni
POST data:
*UNKNOWN*
========================================
Локальное время:19.05.2016 18:24:10
Время сессии: 08:57:37
Время отчета: 21.05.2016 04:49:03
Процесс: C:\Windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Microsoft® Windows® Operating System | 6.1.7600.16385
Источник: http://7yh0mdze6ztr7erew835im3w8.info/web-entry/qsdlfkgjsl.php
Тип: HTTP запрос
Размер (байты): 198
----------------------------------------
http://7yh0mdze6ztr7erew835im3w8.info/web-entry/qsdlfkgjsl.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input: ta uni
POST data:
*UNKNOWN*
========================================
Bot ID: ACER-339802C1B8_7BF1A2E15051655C
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1043
Локальное время:21.05.2016 23:47:15
GMT: +2:00
Время сессии: 00:07:44
Время отчета: 21.05.2016 21:47:18
Страна: ??
IPv4: 62.205.73.227
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://wifiportal.telenet.be/homespot/login.html
Тип: HTTPS запрос
Размер (байты): 1 660
----------------------------------------
https://wifiportal.telenet.be/homespot/login.html
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: TN_HOMESPOT_ROAMING_PARTNER=278baa5f-d392-442d-a18c-d731f7c7611c; utag_main=v_id:01519c04cc890007dba75b740aeb0008700 4c07f006a0$_sn:3$_ss:1$_st:1459974651625$dc_u18:1$ _pn:1%3Bexp-session$ses_id:1459972851625%3Bexp-session; s_pers=%20s_fid%3D3B1B76ABD3A1772A-364FFE79F5D9BEEC%7C1513179949296%3B%20s_dfa%3Dupct elenet20%7C1451344812109%3B%20s_cpm%3D%255B%255B%2 527Natural%252520Search%2527%252C%2527145002154931 2%2527%255D%252C%255B%2527Paid%252520Search%252520 Branded%2527%252C%25271450021641609%2527%255D%252C %255B%2527Direct%2527%252C%25271451343012765%2527% 255D%255D%7C1609195812734%3B%20s_visitstart%3D1%7C 1451344889937%3B%20s_nr%3D1451343089937-Repeat%7C1482879089937%3B%20s_cpdirect%3D1%7C14513 44889953%3B; AMCV_94B35888557A99487F000101%40AdobeOrg=199910993 1%7CMCMID%7C90968912373695526980161364640611244346 %7CMCAAMLH-1451947819%7C6%7CMCAAMB-1451947819%7CNRX38WO0n5BH8Th-nqAG_A%7CMCAID%7C2B36C9560530E6F7-40000306A01A6F63; BIGipServerjbscrtHmp.prd.cust.telenet.be=!NYAdCeAs anxXT+Rx0Ug1mOOPxWvt24sCA5Hje3ch+NRONx9qceZENyxxTC JBEdKwhbDT7yIrGkuaINquqe5ib4zQ8XziEpJgU/Se1M699w==; TS01b72ace=01aef304cb2226e0316042505319bab224b551f 1b7dba3952095d7ffa64c13b64259eb59c073d692d57fd2f55 99d66eef79a3a6209a6b056e4ea815cbd4ed36f3c0a5397a5
Accept-Language: nl
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:800
Referer: https://wifiportal.telenet.be/homespot/login.html
User input: z694 505 WMV545
POST data:
operator=TLN
userName=z694505
passWord=WMV545
terms=on
========================================
Bot ID: ACER-684C9A655D_7BF1A2E1E933FF10
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1033
Локальное время:19.05.2016 19:16:52
GMT: +1:00
Время сессии: 01:26:17
Время отчета: 21.05.2016 17:09:47
Страна: ??
IPv4: 86.186.151.207
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=2023392312&c7=https%3A%2F%2Fu k.yahoo.com%2F&c14=106&ns__t=1463681812796&ns_c=wi ndows-1252
Тип: HTTPS запрос
Размер (байты): 499
----------------------------------------
https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=2023392312&c7=https%3A%2F%2Fu k.yahoo.com%2F&c14=106&ns__t=1463681812796&ns_c=wi ndows-1252
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: UID=1DA81a13959a29a184ef3431439313713; UIDR=1439313713; CP3=1
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:800
Referer: https://uk.yahoo.com/?ilc=1
User input:
POST data:
*EMPTY*
========================================
Локальное время:19.05.2016 19:17:14
Время сессии: 01:26:39
Время отчета: 21.05.2016 17:09:48
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://sb.scorecardresearch.com/p?c1=2&c2=7241469&cv=2.0&cj=1&c5=967340522&c7=http s%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2
Тип: HTTPS запрос
Размер (байты): 550
----------------------------------------
https://sb.scorecardresearch.com/p?c1=2&c2=7241469&cv=2.0&cj=1&c5=967340522&c7=http s%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: UID=1DA81a13959a29a184ef3431439313713; UIDR=1439313713; CP3=1
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:800
Referer: https://uk-mg42.mail.yahoo.com/neo/b/launch?.rand=clc9finad0bl2
User input:
POST data:
*EMPTY*
========================================
Локальное время:19.05.2016 19:17:16
Время сессии: 01:26:40
Время отчета: 21.05.2016 17:09:53
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://sb.scorecardresearch.com/p?ns__t=1463681836156&ns__c=windows-1252&c1=3&c3=apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c6=&c10=1&c11=&c13=&c16=yh o|cbt&rn=1463681834149089&c2=18904046&ax_iframe=2& ns_ce_sv=4.1508.13&ns_ce_mod=vce_st&ns_ad_event=lo ad&c8=&c7=https%3A%2F%2Fs.yimg.com%2Frq%2Fdarla%2F 2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2
Тип: HTTPS запрос
Размер (байты): 810
----------------------------------------
https://sb.scorecardresearch.com/p?ns__t=1463681836156&ns__c=windows-1252&c1=3&c3=apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c6=&c10=1&c11=&c13=&c16=yh o|cbt&rn=1463681834149089&c2=18904046&ax_iframe=2& ns_ce_sv=4.1508.13&ns_ce_mod=vce_st&ns_ad_event=lo ad&c8=&c7=https%3A%2F%2Fs.yimg.com%2Frq%2Fdarla%2F 2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: UID=1DA81a13959a29a184ef3431439313713; UIDR=1439313713; CP3=1
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:800
Referer: https://s.yimg.com/rq/darla/2-9-5/html/r-sf.html
User input:
POST data:
*EMPTY*
========================================
Локальное время:19.05.2016 19:17:16
Время сессии: 01:26:40
Время отчета: 21.05.2016 17:09:53
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://sa.scorecardresearch.com/rpc.flow?uid=uid1463681836218&ns_mod_ns=mvce&ns__p =1463681836156&ns__t=1463681836156&ns__c=windows-1252&c1=3&c3=apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c6=&c10=1&c11=&c13=&c16=yh o|cbt&rn=1463681834149089&c2=18904046&ax_iframe=2& ns_ce_sv=4.1508.13&ns_ce_mod=vce_st&ns_ad_event=lo ad&c8=&c7=https%3A%2F%2Fs.yimg.com%2Frq%2Fdarla%2F 2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2
Тип: HTTPS запрос
Размер (байты): 873
----------------------------------------
https://sa.scorecardresearch.com/rpc.flow?uid=uid1463681836218&ns_mod_ns=mvce&ns__p =1463681836156&ns__t=1463681836156&ns__c=windows-1252&c1=3&c3=apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c6=&c10=1&c11=&c13=&c16=yh o|cbt&rn=1463681834149089&c2=18904046&ax_iframe=2& ns_ce_sv=4.1508.13&ns_ce_mod=vce_st&ns_ad_event=lo ad&c8=&c7=https%3A%2F%2Fs.yimg.com%2Frq%2Fdarla%2F 2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: UID=1DA81a13959a29a184ef3431439313713; UIDR=1439313713; CP3=1
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:800
Referer: https://s.yimg.com/rq/darla/2-9-5/html/r-sf.html
User input:
POST data:
*EMPTY*
========================================
Локальное время:19.05.2016 19:17:16
Время сессии: 01:26:41
Время отчета: 21.05.2016 17:09:55
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://sb.scorecardresearch.com/p?ns__t=1463681836515&ns__c=windows-1252&ns_ad_brt=140&ns__p=1463681836156&c1=3&c3=_e0 _apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c6=&c10=1&c11=&c13=&c16=yh o|cbt&rn=1463681834149089&c2=18904046&ax_iframe=2& ns_ce_sv=4.1508.13&ns_ce_mod=vce_st&ns_ad_event=bo ot&ns_ad_boot=250&ns_ad_fpv=21&c8=&c7=https%3A%2F% 2Fs.yimg.com%2Frq%2Fdarla%2F2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2
Тип: HTTPS запрос
Размер (байты): 876
----------------------------------------
https://sb.scorecardresearch.com/p?ns__t=1463681836515&ns__c=windows-1252&ns_ad_brt=140&ns__p=1463681836156&c1=3&c3=_e0 _apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c6=&c10=1&c11=&c13=&c16=yh o|cbt&rn=1463681834149089&c2=18904046&ax_iframe=2& ns_ce_sv=4.1508.13&ns_ce_mod=vce_st&ns_ad_event=bo ot&ns_ad_boot=250&ns_ad_fpv=21&c8=&c7=https%3A%2F% 2Fs.yimg.com%2Frq%2Fdarla%2F2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: UID=1DA81a13959a29a184ef3431439313713; UIDR=1439313713; CP3=1
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:800
Referer: https://s.yimg.com/rq/darla/2-9-5/html/r-sf.html
User input:
POST data:
*EMPTY*
========================================
Локальное время:19.05.2016 19:17:16
Время сессии: 01:26:41
Время отчета: 21.05.2016 17:09:55
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://sb.scorecardresearch.com/p?ns__t=1463681836640&ns__c=windows-1252&uid=ns_ad1463681836156&c1=3&c3=_e0_apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c10=1&c16=yho|cbt&rn=14636 81834149089&c2=18904046&ax_iframe=2&ns_ce_mod=vce_ st&ns__p=1463681836156&ax_cid=18904046&ns_ad_event =found&ns_ad_id=ns_ad1463681836156&ns_ad_sz=159x59 9&ns_ad_po=0x0&ns_ad_vsd=1280x800&ns_ad_sd=1280x80 0&ns_ad_vad=159x599&ns_ad_vap=1075x268&ns_ad_vvd=1 59x599&ns_ad_vvp=1075x268&ns_ad_vi=89&ns_type=hidd en&ns_ad_pid=1463681836468&ax_mid=3121784581836468 &ns_ad_vw=159x599&ns_ad_sc=0x0&ns_ad_sv=4.1509.11& ns_ad_tn=HTML&ns_ad_db=MSIE/8.0|-60|Win32|0|1|0|en-us|x86|en-us|en-gb|0|0x0|0x0|79|-1|50|-2|0|-1|101011100000001000&ns_ad_ec=1&ns_ad_fpv=21&c7=ht tps%3A%2F%2Fs.yimg.com%2Frq%2Fdarla%2F2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2&c8=
Тип: HTTPS запрос
Размер (байты): 1 274
----------------------------------------
https://sb.scorecardresearch.com/p?ns__t=1463681836640&ns__c=windows-1252&uid=ns_ad1463681836156&c1=3&c3=_e0_apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c10=1&c16=yho|cbt&rn=14636 81834149089&c2=18904046&ax_iframe=2&ns_ce_mod=vce_ st&ns__p=1463681836156&ax_cid=18904046&ns_ad_event =found&ns_ad_id=ns_ad1463681836156&ns_ad_sz=159x59 9&ns_ad_po=0x0&ns_ad_vsd=1280x800&ns_ad_sd=1280x80 0&ns_ad_vad=159x599&ns_ad_vap=1075x268&ns_ad_vvd=1 59x599&ns_ad_vvp=1075x268&ns_ad_vi=89&ns_type=hidd en&ns_ad_pid=1463681836468&ax_mid=3121784581836468 &ns_ad_vw=159x599&ns_ad_sc=0x0&ns_ad_sv=4.1509.11& ns_ad_tn=HTML&ns_ad_db=MSIE/8.0|-60|Win32|0|1|0|en-us|x86|en-us|en-gb|0|0x0|0x0|79|-1|50|-2|0|-1|101011100000001000&ns_ad_ec=1&ns_ad_fpv=21&c7=ht tps%3A%2F%2Fs.yimg.com%2Frq%2Fdarla%2F2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2&c8=
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: UID=1DA81a13959a29a184ef3431439313713; UIDR=1439313713; CP3=1
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:800
Referer: https://s.yimg.com/rq/darla/2-9-5/html/r-sf.html
User input:
POST data:
*EMPTY*
========================================
Локальное время:19.05.2016 19:17:18
Время сессии: 01:26:42
Время отчета: 21.05.2016 17:09:56
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://sb.scorecardresearch.com/p?ns__t=1463681838125&ns__c=windows-1252&c1=3&c3=_e1_apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c10=1&c16=yho|cbt&rn=14636 81834149089&c2=18904046&ax_iframe=2&ns_ce_mod=vce_ st&ns__p=1463681836156&ax_cid=18904046&ns_ad_id=ns _ad1463681836156&ns_ad_sz=160x600&ns_ad_po=0x0&ns_ ad_vsd=1280x800&ns_ad_sd=1280x800&ns_ad_vad=160x60 0&ns_ad_vap=1075x289&ns_ad_vvd=160x600&ns_ad_vvp=1 075x289&ns_ad_vi=85&ns_ad_event=qp1&ns_type=hidden &ns_ad_pid=1463681836468&ax_mid=3121784581836468&n s_ad_vw=160x600&ns_ad_sc=0x0&ns_ad_sv=4.1509.11&ns _ad_tn=HTML&ns_ad_db=MSIE/8.0|-60|Win32|0|1|0|en-us|x86|en-us|en-gb|0|0x0|0x0|75|-1|50|-2|0|-1|101011100010001000&ns_ad_ec=2&ax_vt=1500&ns_ad_a vt=1500&ns_ad_fpv=21&c7=https%3A%2F%2Fs.yimg.com%2 Frq%2Fdarla%2F2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2&c8=
Тип: HTTPS запрос
Размер (байты): 1 275
----------------------------------------
https://sb.scorecardresearch.com/p?ns__t=1463681838125&ns__c=windows-1252&c1=3&c3=_e1_apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c10=1&c16=yho|cbt&rn=14636 81834149089&c2=18904046&ax_iframe=2&ns_ce_mod=vce_ st&ns__p=1463681836156&ax_cid=18904046&ns_ad_id=ns _ad1463681836156&ns_ad_sz=160x600&ns_ad_po=0x0&ns_ ad_vsd=1280x800&ns_ad_sd=1280x800&ns_ad_vad=160x60 0&ns_ad_vap=1075x289&ns_ad_vvd=160x600&ns_ad_vvp=1 075x289&ns_ad_vi=85&ns_ad_event=qp1&ns_type=hidden &ns_ad_pid=1463681836468&ax_mid=3121784581836468&n s_ad_vw=160x600&ns_ad_sc=0x0&ns_ad_sv=4.1509.11&ns _ad_tn=HTML&ns_ad_db=MSIE/8.0|-60|Win32|0|1|0|en-us|x86|en-us|en-gb|0|0x0|0x0|75|-1|50|-2|0|-1|101011100010001000&ns_ad_ec=2&ax_vt=1500&ns_ad_a vt=1500&ns_ad_fpv=21&c7=https%3A%2F%2Fs.yimg.com%2 Frq%2Fdarla%2F2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2&c8=
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: UID=1DA81a13959a29a184ef3431439313713; UIDR=1439313713; CP3=1
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:800
Referer: https://s.yimg.com/rq/darla/2-9-5/html/r-sf.html
User input:
POST data:
*EMPTY*
========================================
Локальное время:19.05.2016 19:17:23
Время сессии: 01:26:48
Время отчета: 21.05.2016 17:09:56
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://sb.scorecardresearch.com/p?ns__t=1463681843578&ns__c=windows-1252&c1=3&c3=_e5_apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c10=1&c16=yho|cbt&rn=14636 81834149089&c2=18904046&ax_iframe=2&ns_ce_mod=vce_ st&ns__p=1463681836156&ax_cid=18904046&ax_bl=0&ax_ blt=2328&ns_ad_id=ns_ad1463681836156&ns_ad_sz=160x 600&ns_ad_po=0x0&ns_ad_vsd=1280x800&ns_ad_sd=1280x 800&ns_ad_vad=160x600&ns_ad_vap=1075x289&ns_ad_vvd =160x600&ns_ad_vvp=1075x289&ns_ad_vi=85&ns_ad_even t=qp5&ns_type=hidden&ns_ad_pid=1463681836468&ax_mi d=3121784581836468&ns_ad_vw=160x600&ns_ad_sc=0x0&n s_ad_sv=4.1509.11&ns_ad_tn=HTML&ns_ad_db=MSIE/8.0|-60|Win32|0|1|0|en-us|x86|en-us|en-gb|0|0x0|0x0|75|-1|50|-2|0|-1|101011100000001000&ns_ad_ec=3&ax_vt=5453&ns_ad_a vt=6953&ns_ad_fpv=21&c7=https%3A%2F%2Fs.yimg.com%2 Frq%2Fdarla%2F2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2&c8=
Тип: HTTPS запрос
Размер (байты): 1 295
----------------------------------------
https://sb.scorecardresearch.com/p?ns__t=1463681843578&ns__c=windows-1252&c1=3&c3=_e5_apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c10=1&c16=yho|cbt&rn=14636 81834149089&c2=18904046&ax_iframe=2&ns_ce_mod=vce_ st&ns__p=1463681836156&ax_cid=18904046&ax_bl=0&ax_ blt=2328&ns_ad_id=ns_ad1463681836156&ns_ad_sz=160x 600&ns_ad_po=0x0&ns_ad_vsd=1280x800&ns_ad_sd=1280x 800&ns_ad_vad=160x600&ns_ad_vap=1075x289&ns_ad_vvd =160x600&ns_ad_vvp=1075x289&ns_ad_vi=85&ns_ad_even t=qp5&ns_type=hidden&ns_ad_pid=1463681836468&ax_mi d=3121784581836468&ns_ad_vw=160x600&ns_ad_sc=0x0&n s_ad_sv=4.1509.11&ns_ad_tn=HTML&ns_ad_db=MSIE/8.0|-60|Win32|0|1|0|en-us|x86|en-us|en-gb|0|0x0|0x0|75|-1|50|-2|0|-1|101011100000001000&ns_ad_ec=3&ax_vt=5453&ns_ad_a vt=6953&ns_ad_fpv=21&c7=https%3A%2F%2Fs.yimg.com%2 Frq%2Fdarla%2F2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2&c8=
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: UID=1DA81a13959a29a184ef3431439313713; UIDR=1439313713; CP3=1
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:800
Referer: https://s.yimg.com/rq/darla/2-9-5/html/r-sf.html
User input:
POST data:
*EMPTY*
========================================
Локальное время:19.05.2016 19:17:32
Время сессии: 01:26:57
Время отчета: 21.05.2016 17:09:57
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://sb.scorecardresearch.com/p?ns__t=1463681852718&ns__c=windows-1252&c1=3&c3=_eu_apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c10=1&c16=yho|cbt&rn=14636 81834149089&c2=18904046&ax_iframe=2&ns_ce_mod=vce_ st&ns__p=1463681836156&ax_cid=18904046&ax_bl=0&ax_ blt=2328&ns_ad_event=unload&ns_ad_id=ns_ad14636818 36156&ns_ad_sz=160x600&ns_ad_po=0x0&ns_ad_vsd=1280 x800&ns_ad_sd=1280x800&ns_ad_vi=0&ns_type=hidden&n s_ad_pid=1463681836468&ax_mid=3121784581836468&ns_ ad_vw=160x600&ns_ad_sc=0x0&ns_ad_sv=4.1509.11&ns_a d_tn=HTML&ns_ad_db=MSIE/8.0|-60|Win32|0|1|0|en-us|x86|en-us|en-gb|0|0x0|0x0|79|-1|50|-2|0|-1|100011100000001000&ns_ad_ec=4&ax_vt=9125&ns_ad_a vt=16078&ns_ad_fpv=21&c7=https%3A%2F%2Fs.yimg.com% 2Frq%2Fdarla%2F2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2&c8=
Тип: HTTPS запрос
Размер (байты): 1 224
----------------------------------------
https://sb.scorecardresearch.com/p?ns__t=1463681852718&ns__c=windows-1252&c1=3&c3=_eu_apt-103150032&c4=5792299032&c5=429267032_uk-mg42.mail.yahoo.com|106&c10=1&c16=yho|cbt&rn=14636 81834149089&c2=18904046&ax_iframe=2&ns_ce_mod=vce_ st&ns__p=1463681836156&ax_cid=18904046&ax_bl=0&ax_ blt=2328&ns_ad_event=unload&ns_ad_id=ns_ad14636818 36156&ns_ad_sz=160x600&ns_ad_po=0x0&ns_ad_vsd=1280 x800&ns_ad_sd=1280x800&ns_ad_vi=0&ns_type=hidden&n s_ad_pid=1463681836468&ax_mid=3121784581836468&ns_ ad_vw=160x600&ns_ad_sc=0x0&ns_ad_sv=4.1509.11&ns_a d_tn=HTML&ns_ad_db=MSIE/8.0|-60|Win32|0|1|0|en-us|x86|en-us|en-gb|0|0x0|0x0|79|-1|50|-2|0|-1|100011100000001000&ns_ad_ec=4&ax_vt=9125&ns_ad_a vt=16078&ns_ad_fpv=21&c7=https%3A%2F%2Fs.yimg.com% 2Frq%2Fdarla%2F2-9-5%2Fhtml%2Fr-sf.html&c9=https%3A%2F%2Fuk-mg42.mail.yahoo.com%2Fneo%2Fb%2Flaunch%3F.rand%3Dc lc9finad0bl2&c8=
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: UID=1DA81a13959a29a184ef3431439313713; UIDR=1439313713; CP3=1
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:800
Referer: https://s.yimg.com/rq/darla/2-9-5/html/r-sf.html
User input:
POST data:
*EMPTY*
========================================
Bot ID: ACER-6E40E97492_7BF1A2E1E9FBA53B
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1033
Локальное время:21.05.2016 14:20:55
GMT: -4:00
Время сессии: 00:45:18
Время отчета: 21.05.2016 18:27:36
Страна: ??
IPv4: 162.211.184.2
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://www.paypal.com/cgi-bin/webscr
Тип: HTTPS запрос
Размер (байты): 789
----------------------------------------
https://www.paypal.com/cgi-bin/webscr
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1)
Cookie: s_pers=%20s_fid%3D7F811988F1CB5D11-0BDDA45B3765D42C%7C1523911814046%3B%20gpv_c43%3Dma in%253Awps%253Aux%253Abutton%253Adone%7C1460841614 093%3B%20gpv_events%3Dno%2520value%7C1460841614140 %3B; ts=vreXpYrS%3D1555510591%26vteXpYrS%3D1460841614%2 6vr%3D20cd11eb1540a12566a4cd57fdcfb88d%26vt%3D20cd 68b41540a4912033eec3ff522c0a
Accept-Language: en-us
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://global.acer.com/
User input:
POST data:
cmd=_s-xclick
hosted_button_id=X8RJZHQQQ7S8N
on0=Purchase
os0=1 Month
currency_code=CAD
submit.x=126
submit.y=18
========================================
Локальное время:21.05.2016 14:20:58
Время сессии: 00:45:21
Время отчета: 21.05.2016 18:27:37
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://www.paypal.com/ca/cgi-bin/webscr?cmd=_flow&SESSION=zcSipNPfkY_9xfVxLTO5A8TVQ xEvDTamFw03PFNn9o2BL7VCVuL1JGETu7O&dispatch=50a222 a57771920b6a3d7b606239e4d529b525e0b7e69bf0224adecf b0124e9b61f737ba21b0819848475f0da5465a2ea26eae033c be3bda
Тип: HTTPS запрос
Размер (байты): 923
----------------------------------------
https://www.paypal.com/ca/cgi-bin/webscr?cmd=_flow&SESSION=zcSipNPfkY_9xfVxLTO5A8TVQ xEvDTamFw03PFNn9o2BL7VCVuL1JGETu7O&dispatch=50a222 a57771920b6a3d7b606239e4d529b525e0b7e69bf0224adecf b0124e9b61f737ba21b0819848475f0da5465a2ea26eae033c be3bda
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1)
Cookie: s_pers=%20s_fid%3D7F811988F1CB5D11-0BDDA45B3765D42C%7C1523911814046%3B%20gpv_c43%3Dma in%253Awps%253Aux%253Abutton%253Adone%7C1460841614 093%3B%20gpv_events%3Dno%2520value%7C1460841614140 %3B; ts=vreXpYrS%3D1555510591%26vteXpYrS%3D1460841614%2 6vr%3D20cd11eb1540a12566a4cd57fdcfb88d%26vt%3D20cd 68b41540a4912033eec3ff522c0a; AKDC=slc-b-origin-www-2.paypal.com
Accept-Language: en-us
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://global.acer.com/
User input:
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 14:21:13
Время сессии: 00:45:35
Время отчета: 21.05.2016 18:27:38
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://paypal.d1.sc.omtrdc.net/b/ss/paypalglobal/1/H.25.3/s23134303299034?AQB=1&ndh=1&t=21%2F4%2F2016%2014%3 A21%3A12%206%20240&fid=7F811988F1CB5D11-0BDDA45B3765D42C&vmt=51437A79&vmf=paypal.112.2o7.n et&ce=UTF-8&ns=paypal&pageName=main%3Awps%3Aux%3Abutton%3Ast art&g=https%3A%2F%2Fwww.paypal.com%2Fca%2Fcgi-bin%2Fwebscr%3Fcmd%3D_flow%26SESSION%3DzcSipNPfkY_ 9xfVxLTO5A8TVQxEvDTamFw03PFNn9o2BL7VCVuL1JGETu7O%2 6dispatch%3D50a222a57771920b6a3d7b606239e4d529b525 e0b7e69bf0224adecfb0124e9b61f737ba21b0819848475f0d a5465a2ea26eae033cbe3bda&r=http%3A%2F%2Fglobal.ace r.com%2F&cc=USD&ch=ux&server=main&c1=xpt%2FCheckou t%2Fwps%2FBilling&c5=4X035950HE879991W&c7=none&v7= none%3Anone%3Anone&c8=none&c9=none&c17=Pay%20with% 20a%20debit%20or%20credit%20card%20-%20PayPal&c19=main%3Awps%3Aux%3Abutton%3Astart&v19 =D%3Dc7&c20=1463854862&c21=6ae045e01f73&c25=main%3 Awps%3Aux%3Abutton%3Astart%3Aguest%3A1%3A&v25=main %3Awps%3Aux%3Abutton%3Astart%3Aguest%3A1%3A&v28=tn c-a-wpsg-cntl&v31=main%3Awps%3Aux%3Abutton%3Astart&c35=out& c36=paypal.com%2Fca%2Fcgi-bin%2Fwebscr%3Fcmd%3D_flow&v36=CA&c37=wps&c39=D%3D pageName&c40=a8b8d749e5cbe&c47=D%3DpageName&c50=en _us&v50=qHWI3BcuMeELHQvITMxO3ncA5H57ek7qJ2KswEJaGT h9IkFRK0G8lCk%252bQlKum3LNsMiHYW0X8Mw%253d_154d48c 8eec&c53=h.25.3%7C01.17.2013&c56=yes&c64=6ae045e01 f73&c72=UTF-8&s=533x400&c=32&j=1.5&v=Y&k=Y&bw=527&bh=213&ct=la n&hp=N&AQE=1
Тип: HTTPS запрос
Размер (байты): 1 945
----------------------------------------
https://paypal.d1.sc.omtrdc.net/b/ss/paypalglobal/1/H.25.3/s23134303299034?AQB=1&ndh=1&t=21%2F4%2F2016%2014%3 A21%3A12%206%20240&fid=7F811988F1CB5D11-0BDDA45B3765D42C&vmt=51437A79&vmf=paypal.112.2o7.n et&ce=UTF-8&ns=paypal&pageName=main%3Awps%3Aux%3Abutton%3Ast art&g=https%3A%2F%2Fwww.paypal.com%2Fca%2Fcgi-bin%2Fwebscr%3Fcmd%3D_flow%26SESSION%3DzcSipNPfkY_ 9xfVxLTO5A8TVQxEvDTamFw03PFNn9o2BL7VCVuL1JGETu7O%2 6dispatch%3D50a222a57771920b6a3d7b606239e4d529b525 e0b7e69bf0224adecfb0124e9b61f737ba21b0819848475f0d a5465a2ea26eae033cbe3bda&r=http%3A%2F%2Fglobal.ace r.com%2F&cc=USD&ch=ux&server=main&c1=xpt%2FCheckou t%2Fwps%2FBilling&c5=4X035950HE879991W&c7=none&v7= none%3Anone%3Anone&c8=none&c9=none&c17=Pay%20with% 20a%20debit%20or%20credit%20card%20-%20PayPal&c19=main%3Awps%3Aux%3Abutton%3Astart&v19 =D%3Dc7&c20=1463854862&c21=6ae045e01f73&c25=main%3 Awps%3Aux%3Abutton%3Astart%3Aguest%3A1%3A&v25=main %3Awps%3Aux%3Abutton%3Astart%3Aguest%3A1%3A&v28=tn c-a-wpsg-cntl&v31=main%3Awps%3Aux%3Abutton%3Astart&c35=out& c36=paypal.com%2Fca%2Fcgi-bin%2Fwebscr%3Fcmd%3D_flow&v36=CA&c37=wps&c39=D%3D pageName&c40=a8b8d749e5cbe&c47=D%3DpageName&c50=en _us&v50=qHWI3BcuMeELHQvITMxO3ncA5H57ek7qJ2KswEJaGT h9IkFRK0G8lCk%252bQlKum3LNsMiHYW0X8Mw%253d_154d48c 8eec&c53=h.25.3%7C01.17.2013&c56=yes&c64=6ae045e01 f73&c72=UTF-8&s=533x400&c=32&j=1.5&v=Y&k=Y&bw=527&bh=213&ct=la n&hp=N&AQE=1
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1)
Cookie: s_vi=[CS]v1|2B8951940507AB4C-4000010EA0009F93[CE]
Accept-Language: en-us
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: https://www.paypal.com/ca/cgi-bin/webscr?cmd=_flow&SESSION=zcSipNPfkY_9xfVxLTO5A8TVQ xEvDTamFw03PFNn9o2BL7VCVuL1JGETu7O&dispatch=50a222 a57771920b6a3d7b606239e4d529b525e0b7e69bf0224adecf b0124e9b61f737ba21b0819848475f0da5465a2ea26eae033c be3bda
User input:
POST data:
*EMPTY*
========================================
Bot ID: ACER-NH48MYHEXR_7BF1A2E14AB37344
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1040
Локальное время:22.05.2016 01:14:02
GMT: +2:00
Время сессии: 00:24:17
Время отчета: 21.05.2016 23:14:16
Страна: ??
IPv4: 5.170.12.43
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://x.velocity.ebay.com/link/bce066d8388e83159da48a486185d9889cc87c58
Тип: HTTP запрос
Размер (байты): 632
----------------------------------------
http://x.velocity.ebay.com/link/bce066d8388e83159da48a486185d9889cc87c58
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D872103361808631015591a2270^tguid/bf7462be1530a5f16525d725ff8ff313591a2270^cguid/b660e8e81540a7eda4f68b76fd9c6b96591a2270^
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/
User input: eb
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 01:14:02
Время сессии: 00:24:17
Время отчета: 21.05.2016 23:14:19
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://x.velocity.ebay.com/link/52278a69a759c99059177d8a435e82479729988e
Тип: HTTP запрос
Размер (байты): 632
----------------------------------------
http://x.velocity.ebay.com/link/52278a69a759c99059177d8a435e82479729988e
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D872103361808631015591a2270^tguid/bf7462be1530a5f16525d725ff8ff313591a2270^cguid/b660e8e81540a7eda4f68b76fd9c6b96591a2270^
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/
User input: eb
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 01:14:43
Время сессии: 00:24:57
Время отчета: 21.05.2016 23:17:23
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://rover.ebay.com/roverns/1/724-16468-4166-0?mpvl=http%3A%2F%2Fwww.google.it%2Furl%3Furl%3Dht tp%3A%2F%2Fwww.ebay.it%2F%26rct%3Dj%26frm%3D1%26q% 3D%26esrc%3Ds%26sa%3DU%26ved%3D0ahUKEwiLgujYpezMAh VGWRQKHb3CBUsQFggVMAA%26usg%3DAFQjCNGUiDX6nR0jpkCH 266EYQZqC541bw&mpcl=http%3A%2F%2Fwww.ebay.it%2F&mp t=1463872430919
Тип: HTTP запрос
Размер (байты): 872
----------------------------------------
http://rover.ebay.com/roverns/1/724-16468-4166-0?mpvl=http%3A%2F%2Fwww.google.it%2Furl%3Furl%3Dht tp%3A%2F%2Fwww.ebay.it%2F%26rct%3Dj%26frm%3D1%26q% 3D%26esrc%3Ds%26sa%3DU%26ved%3D0ahUKEwiLgujYpezMAh VGWRQKHb3CBUsQFggVMAA%26usg%3DAFQjCNGUiDX6nR0jpkCH 266EYQZqC541bw&mpcl=http%3A%2F%2Fwww.ebay.it%2F&mp t=1463872430919
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D872103361808631015591a2270^tguid/bf7462be1530a5f16525d725ff8ff313591a2270^cguid/b660e8e81540a7eda4f68b76fd9c6b96591a2270^
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/
User input: eb
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 01:16:19
Время сессии: 00:26:34
Время отчета: 21.05.2016 23:17:26
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dosu5a57d.06 56&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.html% 3F_from%3DR40%26_trksid%3Dp2050601.m570.l1313.TR0. TRC0.H0.Xadesivi%2Bvespa%2Bgts.TRS0%26_nkw%3Dadesi vi%2Bvespa%2Bgts%26_sacat%3D0&callback=jQuery17076 78107155250373_1463872575609
Тип: HTTP запрос
Размер (байты): 1 065
----------------------------------------
http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dosu5a57d.06 56&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.html% 3F_from%3DR40%26_trksid%3Dp2050601.m570.l1313.TR0. TRC0.H0.Xadesivi%2Bvespa%2Bgts.TRS0%26_nkw%3Dadesi vi%2Bvespa%2Bgts%26_sacat%3D0&callback=jQuery17076 78107155250373_1463872575609
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D87210336180863101559221f5d^cguid/b660e8e81540a7eda4f68b76fd9c6b9659221f5d^tguid/bf7462be1530a5f16525d725ff8ff31359221f5d^
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/sch/i.html?_from=R40&_trksid=p2050601.m570.l1313.TR0.T RC0.H0.Xadesivi+vespa+gts.TRS0&_nkw=adesivi+vespa+ gts&_sacat=0
User input: eb adesivi vespa gts
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 01:18:51
Время сессии: 00:29:06
Время отчета: 21.05.2016 23:20:29
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dosu5a57d.06 56&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.html% 3F_from%3DR40%26_trksid%3Dp2050601.m570.l1313.TR0. TRC0.H0.Xadesivi%2Bvespa%2Bgts.TRS0%26_nkw%3Dadesi vi%2Bvespa%2Bgts%26_sacat%3D0&callback=jQuery17048 44355968967553_1463872728171
Тип: HTTP запрос
Размер (байты): 1 223
----------------------------------------
http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dosu5a57d.06 56&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.html% 3F_from%3DR40%26_trksid%3Dp2050601.m570.l1313.TR0. TRC0.H0.Xadesivi%2Bvespa%2Bgts.TRS0%26_nkw%3Dadesi vi%2Bvespa%2Bgts%26_sacat%3D0&callback=jQuery17048 44355968967553_1463872728171
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D87210336180863101559221f5d^cguid/b660e8e81540a7eda4f68b76fd9c6b9659221f5d^tguid/bf7462be1530a5f16525d725ff8ff31359221f5d^; ebay=%5Esbf%3D%23%5E; dp1=bu1p/QEBfX0BAX19AQA**59221fc1^bl/IT5b035341^; nonsession=CgADLAAFXQPNJMQDKACBgpu3BYmY3NDYyYmUxNT MwYTVmMTY1MjVkNzI1ZmY4ZmYzMTMBCaXf
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/sch/i.html?_from=R40&_trksid=p2050601.m570.l1313.TR0.T RC0.H0.Xadesivi+vespa+gts.TRS0&_nkw=adesivi+vespa+ gts&_sacat=0
User input: eb adesivi vespa gts
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 01:19:21
Время сессии: 00:29:36
Время отчета: 21.05.2016 23:20:30
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dpie3a57d.c1 %3Fe&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.htm l%3F_odkw%3Dadesivi%2Bvespa%2Bgts%26_osacat%3D0%26 _from%3DR40%26_trksid%3Dp2045573.m570.l1313.TR0.TR C0.H0.Xspecchietti%2Bvespa%2Bgts.TRS0%26_nkw%3Dspe cchietti%2Bvespa%2Bgts%26_sacat%3D0&callback=jQuer y17046357002088119164_1463872758171
Тип: HTTP запрос
Размер (байты): 1 382
----------------------------------------
http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dpie3a57d.c1 %3Fe&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.htm l%3F_odkw%3Dadesivi%2Bvespa%2Bgts%26_osacat%3D0%26 _from%3DR40%26_trksid%3Dp2045573.m570.l1313.TR0.TR C0.H0.Xspecchietti%2Bvespa%2Bgts.TRS0%26_nkw%3Dspe cchietti%2Bvespa%2Bgts%26_sacat%3D0&callback=jQuer y17046357002088119164_1463872758171
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D87210336180863101559221f5d^cguid/b660e8e81540a7eda4f68b76fd9c6b9659221f5d^tguid/bf7462be1530a5f16525d725ff8ff31359221f5d^; ebay=%5Esbf%3D%23%5E; dp1=bu1p/QEBfX0BAX19AQA**59222055^bl/IT5b0353d5^; nonsession=CgADLAAFXQPPdMgDKACBgpu5VYmY3NDYyYmUxNT MwYTVmMTY1MjVkNzI1ZmY4ZmYzMTOW2pjp
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/sch/i.html?_odkw=adesivi+vespa+gts&_osacat=0&_from=R40 &_trksid=p2045573.m570.l1313.TR0.TRC0.H0.Xspecchie tti+vespa+gts.TRS0&_nkw=specchietti+vespa+gts&_sac at=0
User input: eb adesivi vespa gts<<<<<<<<<<<<<<<< specchietti
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 01:20:47
Время сессии: 00:31:01
Время отчета: 21.05.2016 23:23:33
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.ebay.com/rec/plmt/100009-100010-100047?itm=282023491283&fmt=html&usrSt=4&locale=it-IT&ctg=25645&slr=1200033209&si=101&guid=bf743e5b15 30a1ca0c32c55cffeeeba9&bWidth=1015&cguid=b660e8e81 540a7eda4f68b76fd9c6b96&srchCtxt=%28qry%3Dspecchie tti%252Bvespa%252Bgts%7CdmLCat%3D-1%7CsrCnt%3D0%7CmCCatId%3D0%7CminPrice%3D-1.0%7CmaxPrice%3D-1.0%7CcrncyId%3D380%7CfShip%3D0%7Cetrs%3D0%29&usrS i=IT&_qi=t6ulcpjqcj9%3Fvo%7Bsobtlrbn%28036477&srcU rl=http%3A%2F%2Fwww.ebay.it%2Fitm%2FCOPPIA-SPECCHIETTI-SPECCHI-OMOLOGATI-KABA-SCOOTER-VESPA-GTS-GTV-%2F282023491283%3Fhash%3Ditem41a9e8f6d3%3Ag%3AFgIA AOSwFAZTvWTW%23ht_1296wt_800&callback=jQuery170590 2450368349142_1463872818860
Тип: HTTP запрос
Размер (байты): 1 581
----------------------------------------
http://www.ebay.com/rec/plmt/100009-100010-100047?itm=282023491283&fmt=html&usrSt=4&locale=it-IT&ctg=25645&slr=1200033209&si=101&guid=bf743e5b15 30a1ca0c32c55cffeeeba9&bWidth=1015&cguid=b660e8e81 540a7eda4f68b76fd9c6b96&srchCtxt=%28qry%3Dspecchie tti%252Bvespa%252Bgts%7CdmLCat%3D-1%7CsrCnt%3D0%7CmCCatId%3D0%7CminPrice%3D-1.0%7CmaxPrice%3D-1.0%7CcrncyId%3D380%7CfShip%3D0%7Cetrs%3D0%29&usrS i=IT&_qi=t6ulcpjqcj9%3Fvo%7Bsobtlrbn%28036477&srcU rl=http%3A%2F%2Fwww.ebay.it%2Fitm%2FCOPPIA-SPECCHIETTI-SPECCHI-OMOLOGATI-KABA-SCOOTER-VESPA-GTS-GTV-%2F282023491283%3Fhash%3Ditem41a9e8f6d3%3Ag%3AFgIA AOSwFAZTvWTW%23ht_1296wt_800&callback=jQuery170590 2450368349142_1463872818860
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D87210336180863101559221f5d^cguid/b660e8e81540a7eda4f68b76fd9c6b9659221f5d^tguid/bf7462be1530a5f16525d725ff8ff31359221f5d^; ebay=%5Esbf%3D%23%5E; dp1=bu1p/QEBfX0BAX19AQA**59222073^bl/IT5b0353f3^; nonsession=CgADLAAFXQPP7MwDKACBgpu5zYmY3NDYyYmUxNT MwYTVmMTY1MjVkNzI1ZmY4ZmYzMTP2Hq99
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/itm/COPPIA-SPECCHIETTI-SPECCHI-OMOLOGATI-KABA-SCOOTER-VESPA-GTS-GTV-/282023491283?hash=item41a9e8f6d3:g:FgIAAOSwFAZTvWT W
User input: eb adesivi vespa gts<<<<<<<<<<<<<<<< specchietti
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 01:21:16
Время сессии: 00:31:30
Время отчета: 21.05.2016 23:23:34
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dpie3a57d.c1 %3Fe&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.htm l%3F_odkw%3Dadesivi%2Bvespa%2Bgts%26_osacat%3D0%26 _from%3DR40%26_trksid%3Dp2045573.m570.l1313.TR0.TR C0.H0.Xspecchietti%2Bvespa%2Bgts.TRS0%26_nkw%3Dspe cchietti%2Bvespa%2Bgts%26_sacat%3D0&callback=jQuer y1708745566382019115_1463872872265
Тип: HTTP запрос
Размер (байты): 1 381
----------------------------------------
http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dpie3a57d.c1 %3Fe&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.htm l%3F_odkw%3Dadesivi%2Bvespa%2Bgts%26_osacat%3D0%26 _from%3DR40%26_trksid%3Dp2045573.m570.l1313.TR0.TR C0.H0.Xspecchietti%2Bvespa%2Bgts.TRS0%26_nkw%3Dspe cchietti%2Bvespa%2Bgts%26_sacat%3D0&callback=jQuer y1708745566382019115_1463872872265
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D87210336180863101559221f5d^cguid/b660e8e81540a7eda4f68b76fd9c6b9659221f5d^tguid/bf7462be1530a5f16525d725ff8ff31359221f5d^; ebay=%5Esbf%3D%23%5E; dp1=bu1p/QEBfX0BAX19AQA**592220c9^bl/IT5b035449^; nonsession=CgADLAAFXQPRRNADKACBgpu7JYmY3NDYyYmUxNT MwYTVmMTY1MjVkNzI1ZmY4ZmYzMTPqZpKC
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/sch/i.html?_odkw=adesivi+vespa+gts&_osacat=0&_from=R40 &_trksid=p2045573.m570.l1313.TR0.TRC0.H0.Xspecchie tti+vespa+gts.TRS0&_nkw=specchietti+vespa+gts&_sac at=0
User input: eb adesivi vespa gts<<<<<<<<<<<<<<<< specchietti
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 01:22:26
Время сессии: 00:32:40
Время отчета: 21.05.2016 23:23:35
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.ebay.com/rec/plmt/100009-100010-100047?itm=350577706008&fmt=html&usrSt=4&locale=it-IT&ctg=49899&slr=674382280&si=101&guid=bf743e5b153 0a1ca0c32c55cffeeeba9&bWidth=1015&cguid=b660e8e815 40a7eda4f68b76fd9c6b96&srchCtxt=%28qry%3Dspecchiet ti%252Bvespa%252Bgts%7CdmLCat%3D-1%7CsrCnt%3D0%7CmCCatId%3D0%7CminPrice%3D-1.0%7CmaxPrice%3D-1.0%7CcrncyId%3D380%7CfShip%3D0%7Cetrs%3D0%29&usrS i=IT&_qi=t6ulcpjqcj9%3Feog4d71f%2B%3F0%604&srcUrl= http%3A%2F%2Fwww.ebay.it%2Fitm%2FCoppia-specchietti-Orion-Universale-Naked-PIAGGIO-Vespa-GTS-SuperSport-300-%2F350577706008%3Fhash%3Ditem51a00f4418%3Ag%3AVrwA AOxyjP1R2BY8%23ht_2522wt_1027&callback=jQuery17043 4169807588086_1463872924376
Тип: HTTP запрос
Размер (байты): 1 599
----------------------------------------
http://www.ebay.com/rec/plmt/100009-100010-100047?itm=350577706008&fmt=html&usrSt=4&locale=it-IT&ctg=49899&slr=674382280&si=101&guid=bf743e5b153 0a1ca0c32c55cffeeeba9&bWidth=1015&cguid=b660e8e815 40a7eda4f68b76fd9c6b96&srchCtxt=%28qry%3Dspecchiet ti%252Bvespa%252Bgts%7CdmLCat%3D-1%7CsrCnt%3D0%7CmCCatId%3D0%7CminPrice%3D-1.0%7CmaxPrice%3D-1.0%7CcrncyId%3D380%7CfShip%3D0%7Cetrs%3D0%29&usrS i=IT&_qi=t6ulcpjqcj9%3Feog4d71f%2B%3F0%604&srcUrl= http%3A%2F%2Fwww.ebay.it%2Fitm%2FCoppia-specchietti-Orion-Universale-Naked-PIAGGIO-Vespa-GTS-SuperSport-300-%2F350577706008%3Fhash%3Ditem51a00f4418%3Ag%3AVrwA AOxyjP1R2BY8%23ht_2522wt_1027&callback=jQuery17043 4169807588086_1463872924376
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D87210336180863101559221f5d^cguid/b660e8e81540a7eda4f68b76fd9c6b9659221f5d^tguid/bf7462be1530a5f16525d725ff8ff31359221f5d^; ebay=%5Esbf%3D%23%5E; dp1=bu1p/QEBfX0BAX19AQA**592220e5^bl/IT5b035465^; nonsession=CgADLAAFXQPRtNQDKACBgpu7lYmY3NDYyYmUxNT MwYTVmMTY1MjVkNzI1ZmY4ZmYzMTMIDVdt
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/itm/Coppia-specchietti-Orion-Universale-Naked-PIAGGIO-Vespa-GTS-SuperSport-300-/350577706008?hash=item51a00f4418:g:VrwAAOxyjP1R2BY 8
User input: eb adesivi vespa gts<<<<<<<<<<<<<<<< specchietti
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 01:23:05
Время сессии: 00:33:19
Время отчета: 21.05.2016 23:23:39
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dpie3a57d.c1 %3Fe&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.htm l%3F_odkw%3Dadesivi%2Bvespa%2Bgts%26_osacat%3D0%26 _from%3DR40%26_trksid%3Dp2045573.m570.l1313.TR0.TR C0.H0.Xspecchietti%2Bvespa%2Bgts.TRS0%26_nkw%3Dspe cchietti%2Bvespa%2Bgts%26_sacat%3D0&callback=jQuer y17004541882298069494_1463872982078
Тип: HTTP запрос
Размер (байты): 1 382
----------------------------------------
http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dpie3a57d.c1 %3Fe&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.htm l%3F_odkw%3Dadesivi%2Bvespa%2Bgts%26_osacat%3D0%26 _from%3DR40%26_trksid%3Dp2045573.m570.l1313.TR0.TR C0.H0.Xspecchietti%2Bvespa%2Bgts.TRS0%26_nkw%3Dspe cchietti%2Bvespa%2Bgts%26_sacat%3D0&callback=jQuer y17004541882298069494_1463872982078
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D87210336180863101559221f5d^cguid/b660e8e81540a7eda4f68b76fd9c6b9659221f5d^tguid/bf7462be1530a5f16525d725ff8ff31359221f5d^; ebay=%5Esbf%3D%23%5E; dp1=bu1p/QEBfX0BAX19AQA**5922212c^bl/IT5b0354ac^; nonsession=CgADLAAFXQPS0NgDKACBgpu8sYmY3NDYyYmUxNT MwYTVmMTY1MjVkNzI1ZmY4ZmYzMTNSDJez
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/sch/i.html?_odkw=adesivi+vespa+gts&_osacat=0&_from=R40 &_trksid=p2045573.m570.l1313.TR0.TRC0.H0.Xspecchie tti+vespa+gts.TRS0&_nkw=specchietti+vespa+gts&_sac at=0
User input: eb adesivi vespa gts<<<<<<<<<<<<<<<< specchietti
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 01:23:49
Время сессии: 00:34:04
Время отчета: 21.05.2016 23:26:40
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dosu5a54d.f1 26&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.html% 3F_odkw%3Dspecchietti%2Bvespa%2Bgts%26_osacat%3D0% 26_from%3DR40%26_trksid%3Dp2045573.m570.l1313.TR0. TRC0.H0.Xspecchietti%2Bbeverly.TRS0%26_nkw%3Dspecc hietti%2Bbeverly%26_sacat%3D0&callback=jQuery17064 0490114356222_1463873025484
Тип: HTTP запрос
Размер (байты): 1 409
----------------------------------------
http://www.ebay.com/rec/plmt/100033?guid=bf743e5b1530a1ca0c32c55cffeeeba9&fmt=h tml&locale=it-IT&usrSi=IT&si=101&_qi=t6pwslg%60%3C%3Dosu5a54d.f1 26&srcUrl=http%3A%2F%2Fwww.ebay.it%2Fsch%2Fi.html% 3F_odkw%3Dspecchietti%2Bvespa%2Bgts%26_osacat%3D0% 26_from%3DR40%26_trksid%3Dp2045573.m570.l1313.TR0. TRC0.H0.Xspecchietti%2Bbeverly.TRS0%26_nkw%3Dspecc hietti%2Bbeverly%26_sacat%3D0&callback=jQuery17064 0490114356222_1463873025484
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D87210336180863101559221f5d^cguid/b660e8e81540a7eda4f68b76fd9c6b9659221f5d^tguid/bf7462be1530a5f16525d725ff8ff31359221f5d^; ebay=%5Esbf%3D%23%5E; dp1=bu1p/QEBfX0BAX19AQA**59222153^bl/IT5b0354d3^; nonsession=CgADLAAFXQPTbNwDKACBgpu9TYmY3NDYyYmUxNT MwYTVmMTY1MjVkNzI1ZmY4ZmYzMTOEoaUU
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/sch/i.html?_odkw=specchietti+vespa+gts&_osacat=0&_from =R40&_trksid=p2045573.m570.l1313.TR0.TRC0.H0.Xspec chietti+beverly.TRS0&_nkw=specchietti+beverly&_sac at=0
User input: eb adesivi vespa gts<<<<<<<<<<<<<<<< specchietti<<<<<<<<< beverly
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 01:25:50
Время сессии: 00:36:05
Время отчета: 21.05.2016 23:26:43
Процесс: C:\Programmi\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.ebay.com/rec/plmt/100009-100010-100047?itm=271217596748&fmt=html&usrSt=4&locale=it-IT&ctg=147517&slr=301481577&si=101&guid=bf743e5b15 30a1ca0c32c55cffeeeba9&bWidth=1015&cguid=b660e8e81 540a7eda4f68b76fd9c6b96&srchCtxt=%28qry%3Dspecchie tti%252Bbeverly%7CdmLCat%3D-1%7CsrCnt%3D0%7CmCCatId%3D0%7CminPrice%3D-1.0%7CmaxPrice%3D-1.0%7CcrncyId%3D380%7CfShip%3D0%7Cetrs%3D0%29&usrS i=IT&_qi=t6ulcpjqcj9%3Fvo%7B2d71f%2Bb7%3Dc&srcUrl= http%3A%2F%2Fwww.ebay.it%2Fitm%2F2X-SPECCHIETTI-SPECCHI-RETROVISORI-LOGO-ORO-PIAGGIO-BEVERLY-125-350-300-500-%2F271217596748%3Fhash%3Ditem3f25d4194c%3Ag%3A9OgA AOSwsB9V897T%23ht_4403wt_986&callback=jQuery170955 9549390579867_1463873075359
Тип: HTTP запрос
Размер (байты): 1 631
----------------------------------------
http://www.ebay.com/rec/plmt/100009-100010-100047?itm=271217596748&fmt=html&usrSt=4&locale=it-IT&ctg=147517&slr=301481577&si=101&guid=bf743e5b15 30a1ca0c32c55cffeeeba9&bWidth=1015&cguid=b660e8e81 540a7eda4f68b76fd9c6b96&srchCtxt=%28qry%3Dspecchie tti%252Bbeverly%7CdmLCat%3D-1%7CsrCnt%3D0%7CmCCatId%3D0%7CminPrice%3D-1.0%7CmaxPrice%3D-1.0%7CcrncyId%3D380%7CfShip%3D0%7Cetrs%3D0%29&usrS i=IT&_qi=t6ulcpjqcj9%3Fvo%7B2d71f%2Bb7%3Dc&srcUrl= http%3A%2F%2Fwww.ebay.it%2Fitm%2F2X-SPECCHIETTI-SPECCHI-RETROVISORI-LOGO-ORO-PIAGGIO-BEVERLY-125-350-300-500-%2F271217596748%3Fhash%3Ditem3f25d4194c%3Ag%3A9OgA AOSwsB9V897T%23ht_4403wt_986&callback=jQuery170955 9549390579867_1463873075359
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; DS_juicyaccess; snprtz|S21273300001384|2600#Service Pack 2#2#5#1; desktopsmiley_1_2_268737831334685_266_4; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)
Cookie: npii=btrm/svid%3D87210336180863101559221f5d^cguid/b660e8e81540a7eda4f68b76fd9c6b9659221f5d^tguid/bf7462be1530a5f16525d725ff8ff31359221f5d^; ebay=%5Esbf%3D%23%5E; dp1=bu1p/QEBfX0BAX19AQA**5922217f^bl/IT5b0354ff^; nonsession=CgADLAAFXQPUHOADKACBgpu9/YmY3NDYyYmUxNTMwYTVmMTY1MjVkNzI1ZmY4ZmYzMTPiRV8d
Accept-Language: it
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.ebay.it/itm/2X-SPECCHIETTI-SPECCHI-RETROVISORI-LOGO-ORO-PIAGGIO-BEVERLY-125-350-300-500-/271217596748?hash=item3f25d4194c:g:9OgAAOSwsB9V897 T
User input: eb adesivi vespa gts<<<<<<<<<<<<<<<< specchietti<<<<<<<<< beverly
POST data:
*EMPTY*
========================================
Bot ID: ADMIN-PC_74DEB1E3C77B6F62
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven
Язык ОС: 1033
Локальное время:14.05.2016 11:27:55
GMT: +0:00
Время сессии: 00:11:31
Время отчета: 21.05.2016 17:04:59
Страна: ??
IPv4: 113.182.84.134
Процесс: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\Startup\winsrv.exe
Информация о процессе:Goоgle Inc. | | 1.0.0.0
Источник: http://easypasster.pe.hu/log/index.php
Тип: HTTP запрос
Размер (байты): 107 472
----------------------------------------
http://easypasster.pe.hu/log/index.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input:
POST data:
text=%3C%2Ftextarea%3E%3Cbr%3E%3Cbr%3E%3Cb%3E%3Cce nter%3E%3Cfont%20color%20%3D%20%22blue%22%3E%2B%2B %2B%2B%2B%2B%2B%20%30USER%30%20%2B%2B%2B%2B%2B%2B% 2B%3Cbr%3E%3C%2Fb%3E%3C%2Ffont%3E%3C%2Fcenter%3E%3 C%2Ftextarea%3E%3Cbr%3E%3Cbr%3E%3Cb%3E%3Cfont%20co lor%20%3D%20%22green%22%3E%5B%20pypy%20%2D%20%36%3 A%32%37%3A%31%37%20PM%20%2D%20%35%2F%31%34%2F%32%3 0%31%36%20%5D%20%3Cbr%3E%3C%2Fb%3E%3C%2Ffont%3E%3C style%3Etextarea%20%7Bwidth%3A%31%30%30%25%3B%20he ight%3A%37em%3B%7D%3C%2Fstyle%3E%3Ctextarea%20read only%3E%3C%2Ftextarea%3E%3Cbr%3E%3Cbr%3E%0D%0A%3Ci mg%20alt%3D%22Screenshot%22%20src%3D%22data%3Aimag e%2Fjpeg%3Bbase%36%34%2C%2F%39j%2F%34AAQSkZJRgABAQ AAAQABAAD%2F%32wBDAA%30JCgsKCA%30LCgsODg%30PEyAVEx ISEyccHhcgLikxMC%34pLSwzOko%2BMzZGNywtQFdBRkxOUlNS Mj%35aYVpQYEpRUk%2F%2F%32wBDAQ%34ODhMREyYVFSZPNS%3 0%31T%30%39PT%30%39PT%30%39PT%30%39PT%30%39PT%30%3 9PT%30%39PT%30%39PT%30%39PT%30%39PT%30%39PT%30%39P T%30%39PT%30%39PT%30%39PT%30%39PT%30%2F%2FwAARCAMA BVYDASIAAhEBAxEB%2F%38QAHwAAAQUBAQEBAQEAAAAAAAAAAA ECAwQFBgcICQoL%2F%38QAtRAAAgEDAwIEAwUFBAQAAAF%39AQ IDAAQRBRIhMUEGE%31FhByJxFDKBkaEII%30KxwRVS%30fAkM% 32JyggkKFhcYGRolJicoKSo%30NTY%33ODk%36Q%30RFRkdISU pTVFVWV%31hZWmNkZWZnaGlqc%33R%31dnd%34eXqDhIWGh%34 iJipKTlJWWl%35iZmqKjpKWmp%36ipqrKztLW%32t%37i%35us LDxMXGx%38jJytLT%31NXW%31%39jZ%32uHi%34%2BTl%35ufo %36erx%38vP%30%39fb%33%2BPn%36%2F%38QAHwEAAwEBAQEB AQEBAQAAAAAAAAECAwQFBgcICQoL%2F%38QAtREAAgECBAQDBA cFBAQAAQJ%33AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCS MzUvAVYnLRChYkNOEl%38RcYGRomJygpKjU%32Nzg%35OkNERU ZHSElKU%31RVVldYWVpjZGVmZ%32hpanN%30dXZ%33eHl%36go OEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO%30tba%33uLm% 36wsPExcbHyMnK%30tPU%31dbX%32Nna%34uPk%35ebn%36Onq %38vP%30%39fb%33%2BPn%36%2F%39oADAMBAAIRAxEAPwDkKV VLHAppNWLKSMSgOwHPc%30mA%35bGVhkKaa%31pKv%38Jrs%37 CTTTEN%38%38IOO%37ipJF%30xv%2BXiH%2FvsVk%36pXKcGYX HUGmFSOortJrbTWBxcQ%2F%38AfYrC%31KG%32j%2F%31csbfR hVKaYmjGopryKGPzCmeav%39%34fnViJDSVGZV%2FvCk%38%31 fUfnTAkJoAJ%36VF%35q%2Boq%33YNEZB%35jKBnuaQDPs%38h %36KaabaX%2B%36a%37O%30XTDGN%30%38Ocf%33hUzJpWD%2B %2Fh%2FwC%2BhQK%36OBkjdOoqAmun%31lbML%2B%35kRvoRXK ysA%35xQMUtTS%31Rl%36TdQA%38mmk%30%33dSZoAdmkzSZpy oWpgNzRgmrcNpu%36sB%2BNaVvpsLfeljH%2FAhTsK%35hbW%3 9KNrDtXWx%36VZ%34%35ni%2FwC%2BxUN%31p%39oinbNGfowo %35Rcxy%35pKtXUSox%32kH%36VVpFBRRRSAUKTUgiNERAPNW% 31dMdRTGVPJb%30pfIb%30q%38rR%35%36irCiEr%39%39fzp% 32AxmjK%30yr%39%30qj%37pB%2BlUT%31pNCEooooAKKKKACl pKKAFopKKQC%30UlFAC%30UlFAC%31%30Xhn%2Fj%34H%31rna %33fD%38%38cU%34LuFGe%35xSewHs%2Bk%2F%38e%30f%30rQ JxXOaXrdilugN%31DkD%2B%2BKunXLE%2F%38vUP%2FfYrnsyj TLUu%2Fishtasv%2BfqH%2FvsU%33%2B%32%37P%2Fn%36i%2F %37%37FFguaxXJzUydKxRrtl%2Fz%39Rf%39%39inrrlj%2FAM %2FcP%2FfYppAa%38n%33ay%37hck%30yTXLErxdw%2F%39%39 iqUmsWZP%38Ax%38xf%39%39ijURZUYNTK%32Kyzq%39n%2FAM %2FMX%2FfYph%31i%30z%2Fx%38Rf%39%39igR%30ds%32TV%3 2uWg%31y%30U%38%33MX%2FfYq%34PEVlj%2Fj%35i%2FwC%2B xTWhRu%31DIayP%2BEhsz%2Fy%38xf%38AfYqNtdsz%2FwAvMX %2FfYoeoGmxyaYwrNGtWX%2FPzF%2F%33%32KU%36zZY%2F%34 %2BYv%2B%2BxSsBakFVn%34qvJrFn%2Fz%38xf%38AfYqs%2Br Wn%2FPxH%2FwB%39CmCLZoUZNZ%35%31W%31%2F%35%2BI%2F% 2B%2BhTl%31W%30%2F%35%2BIv%2B%2BhTGbEQxV%36JsCufXV %37Qf%38vMX%2FfYqwmtWYH%2FAB%38xf%39%39ilYDUmkqqzZ qhJrNof%2BXmL%2FvsVCdXtP%38An%34j%2FAO%2BxRYDRJphN Zx%31e%31%2F%35%2BI%2F%38AvoU%30%36ta%2F%38%2FEf%2 FfQp%32A%30l%36%30%35ulZi%36taf%38%2FEf%2FAH%30KG% 31e%31%2FwCfiP%38A%37%36FFgLj%39aZmqLara%2FwDPeP%3 8A%37%36FMOqWv%2FPeP%2FvoUWAtSVFVd%39TtT%2FwAt%34% 2F%38AvoVCdRts%2FwCvj%2F%37%36FNAXqQiqf%39o%32%33% 2FPeP%2FvoUjalbD%2FltH%2F%33%30KdhFoilC%31nnVLfP%2 BuT%2FAL%36FSpqVt%2Fz%33j%2F%37%36FFhFs%38UB%36oS% 36jb%34%34mT%2FvoVVbVIgf%39av%35%30WGbqyU%34yisJdW g%37yp%2F%33%31Tv%37VgP%2FAC%32T%2FvoUrBc%32t%2BaT dWQNUt%2F%2Beyf%39%39CnjVLf%2FAJ%37J%2FwB%39CiwXNM mgVm%2F%32nb%2F%38%39k%2F%37%36FOGp%32%2F%2FAD%32T %2FvoUWA%30%31%35qwi%31jpqlsD%2FAK%2BP%2FvoVZTV%37 XH%2Bvj%2F%37%36FJoDXiHNX%34B%30rAi%31e%30zzcRf%39 %39CrsOs%32Y%2FwCXmL%2FvsUWA%36SIfLUtYseuWIX%2Fj%3 7h%2F%37%37FP%2FALdsf%2BfuH%2FvsU%30DNeisj%2B%33bH %2Fn%37h%2FwC%2BxR%2Fbtj%2Fz%39w%2F%39%39imI%31%36 KyP%37dsf%2BfuH%2FvsUf%32%37Y%2F%38AP%33D%2FAN%39i gDWorJ%2Ft%32x%2F%35%2B%34f%2B%2BxR%2Fbtj%2FAM%2Fc P%2FfYoA%31qKyf%37dsf%2BfuH%2FAL%37FH%39u%32P%2FP% 33D%2F%33%32KANaisj%2B%33bH%2FAJ%2B%34f%2B%2BxR%2F btj%2Fz%39w%2F%38AfYqWgNU%30hrJOu%32P%2FAD%39w%2Fw DfYpDrlj%2Fz%39Q%2F%39%39ilYo%31qSsn%2B%33LL%2Fn%3 6h%2F%37%37FH%39uWX%2FAD%39Q%2FwDfYoA%31TSGsr%2B%3 3LL%2Fn%36h%2F%37%37FNOuWX%2FP%31F%2F%33%32KALN%36 flNYc%32N%35p%39%37rVqwOLiM%2F%38AAhWPLqsG%34%2Fvk %2FwC%2BhRYTL%30pwtUZDzVeTVID%2FAMtk%2FwC%2BhVdtQg P%2FAC%31T%2FvqmSLfH%39%33XF%36n%2FrWrqLu%39hZMCRT %2BNcrqDbpGI%35qo%37k%39SjRRRWhQUUUUwCiiigAooooAKK KKACiiprdVZ%38MQB%37%30gItpPal%32N%36V%31On%36ZZSx gvcQg%2B%37ir%34%30Sw%2F%35%2BYf%2B%2BxSuOxw%32%31 vSkrtLjRbMJ%38txET%2Fviuev%37ERMdhDD%32p%33CxmUUrK VPINJQIWikopgFKAT%32oHJra%30y%30t%35iPNljX%36sBSAx trelGxvSu%32TRbBlz%39pg%2F%37%37FK%32iWOOLmH%2FvsU uYdjh%38EUV%30Oo%36XFGCY%35Eb%36HNYUsTI%32MGncQzNL mm%30ZoAfmlBqPNLmgCUNTg%31Q%37qUNQBOGp%34aq%34f%33 pwcetAFkNVtT%2FoH%34v%2FADjrNEg%39atpMv%32LbuGctxn %33T%2FA%30AANOBqxoepQ%36bqSXVxbLcxqCDEwBByPeuo%2F %34TbS%2F%2Bhdtv%2B%2BE%2F%2BJpgcnCf%33yf%37w%2FnU jrvmjXplEH%2FjoqATKbkP%30BfPPbmneegnjbdwoTP%34AUAd %35b%2BC%37NGW%30uJraS%38H%33lS%2F%32E%39%2FueWSOK %35TXLW%33s%39QEdqHWJoY%35AHbcRuQNjOBnr%36Vv%2FwDC SaF%2Fbn%39r%34vftOMY%32jbjbt%36Vyt%2Ffm%38uBKwC%3 7UWMY%37hQAP%30FNgOP%38Ax%36fiv%38%33qGlMyfZtu%34Z yvGf%38Ae%2FxqHzF%39RSAswCJp%30Wd%32SIn%35mUZIHsK% 36ibwnaW%39vJfy%36un%39m%2BWGimRMvKx%2FhC%35%34PB% 37%2F%31xyUE%30KzIZgWjB%2BZVOCR%39a%36KXxXbT%32%37 %32Uunp%39g%32BY%34lbDRsP%34g%32OvJ%2FznIgMA%34%33 HbyM%38UlRtKm%34%34OBnijzV%39RQBcn%2FwCPeP%38A%33j %2F%36AlFRTTIYUAcEhs%38H%2FZQf%30NFADrKBbm%2Fihf%3 7h%33Mw%39QqliPxxius%30uSfesVvvRc%38RxDA%2FACua%30 Mb%39aiXuY%35f%38A%30W%31dro%38JtrlJsZwrnH%2FADRa% 2B%34m%32tjesrl%34%31HnLc%35%39%34nP%39KupeRSttRn% 33YzhkZePxFZVtZf%32hpz%33TzlJlc%2FMzfLjA%2FKoNOlbz vmOSodc%2Bv%33a%34YVIVOjV%31da%37nTUpSpq%39%30%39b M%33HmwD%38x%2FOsPVLiUA%37JXH%30Y%31oAM%39V%37uz%3 3ofpVwTIbOOub%32%37DnF%31OP%2B%32hqsb%2B%38%2F%35% 2B%35%2F%2B%2FhrQ%31KzMbE%34rGcYNdKMyf%37def%38AP% 33P%2FAN%2FDSG%38vv%2Bfq%34%2F%37%2BGi%31i%38xwPeu itNEEqA%34%37UnKwJHOfbL%37P%2FAB%39XH%2Ffw%31esbu% 38LDdczn%36yGtw%2BHwO%31Ph%30YI%33Skppg%30yzZXMxQb pXPHdjVl%37iXHDt%2BdOgsdoqx%39j%34q%30%30YSjK%35zu pT%33O%30%37JpR%39HNcteXOoKxxd%33I%2F%37aN%2FjXoc% 32nhxgisy%34%30JHzxSbNYpo%38%2Fe%2B%31If%38AL%35c% 2F%39%2FW%2FxqM%36hqX%2FAD%2B%33X%2Ff%31v%38a%37SX w%36vpVc%2BHV%39KOYqxyB%31DUv%2Bf%32%36%2F%37%2Bt% 2FjSf%32hqX%2FAD%2B%33X%2Ff%31v%38a%36%34%2BHV%39K B%34dTPSjmCxzFvc%36lIw%2FwBNuv%38Av%36%33%2BNdDp%3 0N%39Jgtd%33B%2BsjVqWnh%39VP%33a%33bbTFiUcUcyE%30z PtrScAbriY%2FVzV%39IpFH%2Btk%2F%37%36NWvJ%32%39KXb U%38%34chUkkdB%2FrH%2FAO%2BjWNqV%39KinbNIPoxroJbbe tY%39%37pZfNWpInlZw%32palfbjsu%37gfSVv%38AGsd%39Q% 31TPF%39d%2F%39%2Fm%2FxruZfD%34cnIqH%2FhGk%39KXMUk cV%2FaGqf%38%2F%39%33%2F%33%2Bb%2FGj%2B%30NU%2FwCf %2B%37%2F%37%2FN%2FjXa%2F%38I%30npSf%38ACNp%36Ucw% 37HHx%33%2BqZ%2F%34%2Frv%2Fv%38AN%2FjVpL%37Uv%2Bf% 32%36%2F%37%2Bt%2FjXUr%34bT%30qVfD%36DtRzBY%35mK%3 9%31Enm%38uf%2B%2Frf%34%31oR%33d%39t%35u%37j%2Fv%3 4%31bkegqO%31TjRVA%36UcwWOQvL%36%2FA%2BW%38uR%39JW %2FwAayJb%2FAFTccX%31%33%2FwB%2Fm%2Fxrvp%39BVu%31U %32%38OIT%30ocgscT%2FaGqf%38%2F%39%33%2F%33%2Bb%2F Gj%2B%30NU%2FwCf%2B%37%2F%37%2FN%2FjXa%2F%38I%30np S%2F%38ACNJ%2Fdo%35gscV%39v%31T%2FAJ%2F%37v%2Fv%38 %33%2BNOF%39qh%2FwCX%36%37%2F%37%2FN%2FjXZjw%30npU q%2BGk%2Fu%30uYLHEfbdV%2FwCf%36%37%2F%37%2FN%2FjSf btU%2F%35%2Frv%38A%37%2FN%2FjXdf%38I%32n%39%32mnw% 30n%39%32jmCxw%2F%32%37VP%2Bf%36%37%2FAO%2Fzf%34%3 0n%32%2FVP%2Bf%36%37%2FwC%2Fzf%34%31%33H%2FCNJ%2Fd pD%34ZT%2B%37RzBY%34j%37fqn%2FP%39d%2F%38Af%35v%38 aPt%2Bqf%38AP%39d%2F%39%2Fm%2Fxrtj%34ZT%2B%37Sf%38 I%30n%39%32nzBY%34r%37fqn%2FAD%2FXf%2Ff%35v%38aPt% 2Bqf%38%2F%31%33%2FwB%2Fm%2Fxrtf%38AhGk%2Fu%30f%38 I%30n%39%32jmCxxa%33%2BqZ%2F%34%2Frv%2Fv%38AN%2FjW %35o%31%37ftKN%39%33cnnvKx%2FrWwPDSf%33a%30LHQRGwI FS%33oFjo%39FmkaNd%37s%33Hc%35rcVsjrWVYWbRKAK%30lR gK%35mncskprHA%36%30bWpjIxpWYhpkwetOWX%33qIwtSeU%3 1OzGTNN%37%31A%30hP%38R%2FOl%38lqPIaizAiZ%32%2FvH% 38%36Z%35jf%33m%2FOpzbsaabZqLMRH%35jD%2BI%2FnT%31l b%2B%38fzo%2BzNSi%33aizAkEh%2FvH%38%36eHJ%37moxC%3 1OWFqLMZKD%37%30%37PvTBGwo%32NRZhoMkY%39ifzqq%37t% 2Feb%38%36tNExqJrdjQkxlUu%2F%39%39vzpQ%37%2FAN%39v zqb%37K%31H%32ZqqzAYJG%2Fvt%2BdSLI%33%39%34%2FnSfZ mp%34gaizAjeVv%37x%2FOoWlf%2B%2B%33%35%31Ya%33aoza tRZgVzLJ%2Ffb%38%36TzZP%2BejfnVj%37IaT%37IaLMCESv% 2Ffb%38%36DLJ%2Ffb%38%36n%2Bymj%37IaLMCoZZP%2Bej%2 FwDfRphll%2F%35%36P%2F%33%30auGzNIbI%30WYFEyy%2F%3 8%39H%2FAO%2BjSeZN%2FwA%39X%2F%37%36NXvsRpRZGnqIoG SUD%2FWv%2FwB%39Gqs%31xOOksn%2FfRrXayOKgfTyT%30poD LSe%34Lf%36%36T%2Fvo%31cjkmxzLJ%2F%33%30asJpuD%30q YWRApgZ%38ss%32OJZP%2B%2BjWfcTXIzieX%2Fvs%31uvZk%3 1Xk%30%2Fd%32poRzcl%33dqf%2BPib%2Fvs%30wX%39%32D%2 Fx%38Tf%39%39mt%32TSc%39qhOj%2B%31MRnx%33%31%30f%3 8AlvL%2FAN%39mrSXVwf%38AltL%2FAN%39mrCaTjtViPTcdqT GVVuLj%2FntJ%2FwB%39GnrPP%2Fz%32k%2F%37%36NXl%30%3 7%32p%34%30%38%2BlICkJ%35v%38AnrJ%2F%33%30alSeb%2F AJ%36v%2FwB%39GrQsD%36U%35bEikAkMsh%36yN%2BdX%34HY %39WP%35%31AloRVmOBhUtMZcQ%35HWnVEqMBTsNTVxND%36XN Mw%31GGp%33YrD%38%30ZpmGow%31F%32Fh%39FMw%31GGouws OopuGpMNS%31Cw%2FNGaZhqQq%31LUdh%2BfelzUW%31qXa%31 KzCyH%37qN%33vTNrUmxqLMdkP%33e%39NZ%38DrTdjU%31o%3 2Iosw%30KN%35M%34Bw%37D%36GsWe%34nycSyf%39%39Gt%32 e%31ZqpPpxJ%36VSTEzEe%34uP%38AntL%2FAN%39momubn%2F nvL%2F%33%32a%32zph%39KjbS%2FamKxz%31xdXYXi%34m%2F %37%37Nc%37qN%37qAJ%32%33lyPpK%33%2BNd%35LpGR%30rM udAV%38%35FUhWPPnv%38AVM%2F%38f%31%33%2FAN%2Fm%2Fw AaYb%2FVP%2Bf%2B%37%2F%37%2FADf%34%31%32%37eGlJ%2B %37Sf%38Iyn%39%32tOYLHEf%32hqn%2FP%38A%33f%38A%33% 2Bb%2FABo%2FtDVP%2Bf%38Au%2F%38Av%38%33%2BNdt%2Fwj Kf%33aP%2BEZT%2B%37T%35gscT%2FAGhqn%2FP%2FAHf%2FAH %2Bb%2FGj%2B%30NU%2F%35%2F%37v%2Fv%38AN%2FjXbf%38A CMp%2Fdo%2F%34RlP%37tHMFjif%37Q%31T%2FAJ%2F%37v%2F v%38%33%2BNH%39oap%2FwA%2F%39%33%2F%33%2Bb%2FGu%32 %2F%34RlP%37tH%2FCMp%2Fdo%35gscT%2FaGqf%38%2FwDd%2 FwDf%35v%38AGj%2B%30NU%2F%35%2FwC%37%2FwC%2Fzf%34% 31%32%33%2FCMp%2Fdo%2F%34RlP%37tHMFjiv%37Q%31T%2Fn %2Fu%2F%2B%2FwA%33%2BNW%37K%2B%31IyfNe%33R%2Bszf%3 4%31%31X%2FCMp%2Fdqe%33%38OKrZ%32%30nILGl%34bknkCe bPK%33%2B%38%35NdpCg%32Dkn%38awNK%30%37yAuBW%38isF xmsZXuWEqrjqfzrC%31WCQxkpLIPoxrXk%33ZqCaEunNCTFc%3 8u%31pr%2BJ%32%32XlyPpK%33%2BNc%37Jf%36mp%2F%34%2F %37v%2Fv%38AN%2FjXqOpaMsxPFctqehLEhbFaxYmjlP%37S%3 1P%38A%35%2F%37v%2Fv%38AN%2FjSjUNU%2FwCf%2B%37%2F% 37%2FN%2FjWtaaWJLjbityPw%32pQHbVXFY%35GPUNT%33c%33 %31%33%2F%33%2Bb%2FGuq%38P%33N%37JIvmXVw%33%31kJqw nhtAelbWmaKIXBAqZPQaR%30%2BmAtCpZmJ%39zV%35lGOp%2F OqtpEY%34wKmcN%36%31jZlMqXkRZTtdh%39DXFa%37Hdx%37j Hczr%39JCK%37to%32asjUtO%38%35TkVSuhHlF%31eakjkC%3 9uv%2B%2Fzf%34%31XGoan%2FwA%2F%31%33%2F%33%2Bb%2FG u%35ufDqu%35OKr%2FAPCNL%2FdrVSJsceNQ%31P%38A%35%2F rr%2Fv%38AN%2FjThqGp%2FwDP%39df%39%2Fm%2Fxrr%2F%2B EaX%2B%37S%2F%38I%32vpT%35gsciNQ%31L%2Fn%39uv%2B%2 Frf%34%30%38ahqX%2FP%37df%39%2FW%2FxrrB%34cX%30pR% 34cX%30o%35gscqNQ%31H%2FAJ%2Fbr%2Fv%36%33%2BNSC%2F %31H%2Fn%38uf%2B%2Frf%34%31%31A%38Or%36U%34eHl%39K LhY%35gX%2Bof%38%2Flz%2F%33%39b%2FGrkd%2FfC%32VvtV xuG%2FnzDnrHW%36PD%36%2BlSf%32IAqR%34%36hz%2BqUXCx z%36%36lf%2F%38AP%33cf%39%2FW%2FxqQalf%38A%2FP%33c f%39%2FGrfh%30aKG%34iea%32a%34hBO%2BNWwSMHHOR%33x% 33q%2F%39i%30b%2FoAXX%2Ff%37%2FwC%32U%31YDlotQvjIu bq%34%36j%2FloaU%33%39%36oQC%36nA%38tOkh%2Fuitq%33 %30QhYzIuHwN%33%31py%36KGSM%34%2FgX%2BQpXCw%31dP%3 1IQQyy%36%35aQedGsqrNdsrbSOOMVT%31Malps%38cUt%2BZf MjEqvDMzKVJOOePStSWyS%35itvtNrfCSCBISY%32i%32nb%39 TnuaW%34sDdyxHyZY%34%34YEhQSlSx%32%35%35%34JHcVTsI wvtt%35%35Zb%37TPn%35efMPq%31N%2B%33Xv%2FP%31P%2Fw B%2FDW%36NHHzLjsp%2FVqP%37FHpUXHYw%31vbwsoN%35MgJA LNI%32B%37nHNaz%36brUXmyS%33ypbRxiT%37SbhjG%34PTaQ Mk%2B%32P%35jL%35tGYRExrluOgH%34%39cfzqzLA%30mnLYf YZlto%2BYSHUyK%2FOWYZwQcnjP%38xik%30DOdF%39ekf%38A H%31P%2FAN%2FDR%39uvf%2Bfqf%2Fv%34a%32%30%30YmNS%3 6gMQMgdjTv%37GHpSuBhXE%30ksWJj%35o%38zOJBv%35%32J% 36%30VtHSgd%36%34%2B%37J%2F%37IlFK%34HG%2BGiv%39vR %37vvbZMfTy%33%2FwDrV%36DAm%36JGjXcVJyBjOCpHf%36%3 1%35%31oPGtxN%2F%30zl%2F%39FtXUXmvxaHYQzzQyTec%35Q KjBcYAPf%36%31%30RdldGU%39%37GrNvjj%38kvKkW%37dswp Gfzp%31m%36LIuzdgBslsd%38e%2FtXIzeOrGU%38%36fc%2Fw Df%35f%38A%34miHxzYRf%38w%36%35%2F%37%2FAC%2F%34Vh %37KlC%37hFJstzqTspt%32R%36LFKMUk%30w%32muEHxEsR%2 FzDbn%2FAL%2Br%2FhSP%38Q%37Fhj%2Bzbn%2Fv%36v%38AhW Sg%30Xc%32%39UdWzXOSqC%35qG%34%38ZWE%33%2FADD%37n% 2Fv%38v%2FxNUH%38R%32LHP%32G%35%2F%38CF%2F%2BJraOh LN%32wUCUfWu%36%30%30gRD%36V%35Xb%2BJ%37GFgfsNyf%3 8Atuv%2FAMTW%33B%38RLKFAv%39m%33PH%2FTVf%38ACs%36s XJaDg%37bnojODTCMDOK%34QfEqxz%2FyDLn%2Fv%36v%38AhU g%2BJthjB%30u%35%2FwC%2Fi%2F%34VlTpyjuXKSZ%32aTkNj FXg%2BUzXnY%2BJWnA%35%2Fsu%35%2F%37%2BL%2FAIVL%2Fw ALQsMY%2Fsu%35%2FwC%2Fi%2F%34VtZkHbu%2FNQtLXFn%34m %36ef%2BYXc%2F%39%2FF%2Fwph%2BJOnn%2FmGXP%2Ff%31f% 38KdmB%31%38svtVVpuelcs%2FxF%30%39v%2BYZc%2F%38Af% 31f%38KhPj%33Tif%2BQbc%2FwDf%31f%38AClysLnWmb%32pq zHPSuU%2F%34T%33Tv%2Bgbc%2FwDf%31f%38ACgePdO%2F%36 Btz%2FAN%2FV%2FwAKOVhc%37yzfcelXJpNiDFefw%2FEbT%34 ummXP%2FAH%39X%2FCpm%2BJunsMHS%37n%2Fv%34v%38AhRys dzs%34ZTIxBFOlDDpXEx%2FEvTkORpdz%2FwB%2FF%2Fwp%37f E%2FT%32H%2FACC%37n%2Fv%34v%2BFLlYXOv%38%38qOaqzXB PauTf%34kae%2F%2FMMuf%2B%2Fq%2FwCFQt%38QdPP%2FADDb n%2Fv%36v%2BFPlYrnUmXnpSiX%32rkj%34%2B%30%37%2FoG% 33P%2Ff%31f%38KP%2BE%2B%30%37%2FoG%33P%38A%33%39X% 2FAAo%35WO%35%31Ty%2B%31NEp%39K%35Y%2BPdOP%2FMNuf% 2B%2Fq%2FwCFH%2FCead%2F%30Dbn%2FAL%2Br%2FhRysVzrEl OelS%35zXHjx%39pw%2F%35htz%2FwB%2FV%2Fwp%2FwDwsHT% 2FAPoG%33P%38A%33%39X%2FAAo%35WO%35%32CvinqxPauOHx D%30%38f%38w%32%35%2FwC%2Fq%2F%34VIvxH%30%31f%2BYX c%2F%39%2FF%2FwoswuddIp%32%39KqMcHpXPP%38SdOYY%2Fs u%35%2F%37%2BL%2FhVdviBpzH%2FkG%33P%2Ff%31f%38KLML nWIadIdq%35xXID%34gaeP%2BYbc%2FwDf%31f%38AClb%34g% 36ewwdNuf%2B%2Fq%2FwCFHKwudPDMWcjFWywCg%31xS%2BPdO U%35Gm%33P%38A%33%39X%2FAAp%37fEKwIx%2FZtz%2F%33%3 9X%2FCjlYXOt%38%37mmmeuR%2F%34T%37T%2FAPoHXP%38A%3 3%39X%2FAApD%34%38%30%37%2FoHXX%2Ff%31f%38KOVhc%37 FJc%31YUgjpXDr%34%2B%30%38f%38w%36%35%2F%37%2Br%2F hUo%2BIlgP%38AmG%33P%2Ff%31f%38KOVhc%37PA%39KTA%39 K%34%37%2FhYth%2F%30Dbn%2FAL%2Br%2FhR%2FwsWw%2FwCg bc%2F%39%2FV%2FwpcrC%35%32OB%36UYHpXHf%38LFsP%2Bgb c%2F%38Af%31f%38KP%38AhYth%2FwBA%32%35%2F%37%2Br%2 FhRysLnZAD%30qxbgZ%36Vwv%38AwsWw%2FwCgbc%2F%39%2FV %2FwqSP%34lWKH%2FkGXP%2Ff%31f%38KOVhc%39MhA%32ipa% 38%35T%34rWKjH%39l%33P%2Ffxad%2Fwtiw%2F%36BVz%2FAN %2FFpcjE%32eiUV%35%33%2FAMLYsP%38AoFXP%2FfxaP%2BFs WH%2FQKuf%2B%2Fi%30cjA%39Dorzz%2FhbFh%2F%30C%37n%2 Fv%34tH%2FAAtex%2F%36Bdz%2F%33%38WlyMLnodFeef%38LX sP%38AoF%33P%2FfxaP%2BFr%32H%2FQLuf%2B%2Fi%30cjC%3 5%36HRivPP%38AhbFh%2FwBAu%35%2F%37%2BLR%2Fwtix%2Fw CgXc%2F%39%2FFo%35GFz%30PFGBXnn%2FAAtew%2F%36Bdz%2 F%33%38Wj%2FAIWvYf%38AQLuf%2B%2Fi%30cjC%35%36Hilrz v%2FAIWxYf%38AQLuf%2B%2Fi%30f%38LYsP%38AoFXP%2Ffxa fIwueiUV%35%33%2Fwtix%2F%36BVz%2FwB%2FFo%2F%34WxY% 2F%39Au%35%2FwC%2Fi%30cjA%39EpMV%35%35%2FwALYsf%2B gVc%2F%39%2FFo%2FwCFsWP%2FAEC%37n%2Fv%34tLkYXPQ%38 UmBXnn%2FC%31%37H%2FAKBdz%2F%33%38Wj%2Fha%39j%2FAN Au%35%2F%37%2BLRyMdz%30PApcCvO%2F%2BFr%32P%2FQLuf% 2B%2Fi%30v%38Awtex%2FwCgXc%2F%39%2FFo%35GFz%30IgUm BXnv%2FC%31%37H%2FoF%33P%38A%33%38Wk%2FwCFrWP%2FAE C%37n%2Fv%34tHIwuehYFGBXnv%38Awtax%2FwCgXc%2F%39%2 FFo%2F%34WtY%2FwDQLuf%2B%2Fi%30cjHdHoWBS%34Fee%2Fw DC%31rH%2FAKBdz%2F%33%38Wj%2Fha%31j%2FANAu%35%2F%3 7%2BLRyMLnoOBRgV%35%37%2Fwtax%2F%36Bdz%2FwB%2FFo%2 F%34WtY%2F%39Au%35%2FwC%2Fi%30cjC%35%36DgUcV%35%36 firY%2F%39Au%35%2F%37%2BLR%2FwALUsf%2BgXc%2F%39%2F Fo%35GF%30egkCm%37R%36VwH%2FAAtWx%2F%36Bdz%2F%33%3 8Wj%2FAIWrY%2F%38AQLuf%2B%2Fi%30cjC%36PQQooKivP%2F %38Aha%31h%2FwBAu%35%2F%37%2BLR%2FwtWw%2FwCgXc%2F% 39%2FFo%35GF%30d%32%34FQtiuHb%34p%32B%2F%35hdz%2F% 33%38Woz%38TrA%2FwDMMuf%2B%2Fi%2F%34U%2BVhdHcnFNIF cN%2Fwsyx%2F%36Blz%2FwB%2FV%2Fwo%2FwCFmWP%2FAEDLn% 2Fv%36v%2BFPlYXR%33OBTlxXCf%38LMsf%38AoGXP%2Ff%31f %38KUfE%32xH%2FMMuf%2B%2Fq%2FwCFHKxXPQFxTgBXn%34%2 BKFiP%2BYZc%2F%39%2FF%2Fwp%33%2FAAtGx%2F%36Bdz%2F% 33%38X%2FClyMd%30d%2BAKcAK%38%2F%38A%2BFpWP%2FQLuf %38Av%34tKPinYj%2FmF%33P%38A%33%38WjkYXR%36GoFSAV% 35%30PitYj%2FmF%33P%2FAH%38Wnf%38AC%31%37D%2FoF%33 P%2FfxaORibPRKK%38%37%2FAOFsWH%2FQLuf%2B%2Fi%30f%3 8LYsP%2BgVc%2F%38AfxafKxHolFed%2FwDC%32LD%2FAKBVz% 2F%33%38Wj%2FhbFh%2F%30Crn%2Fv%34tPlYHolLXnX%2FC%3 2LD%2FAKBVz%2F%33%38Wj%2FhbFj%2FANAq%35%2F%37%2BLR ysD%30WivOv%2BFsWP%2FQKuf%2B%2Fi%30f%38AC%32LH%2Fo FXP%2FfxaOVgei%30led%2F%38LYsf%2BgVc%2FwDfxaP%2BFs WH%2FQKuf%2B%2Fi%30uVgeiUV%35%33%2Fwtiw%2F%36Bdz%2 FwB%2FFo%2F%34WxYf%39Au%35%2FwC%2Fi%30crA%39Eorzv% 2FAIWxYf%38AQLuf%2B%2Fi%30f%38LYsP%38AoF%33P%2Ffxa XKwPRKK%38%37%2F%34WxYf%39Au%35%2F%37%2BLR%2FwALYs P%2BgVc%2F%39%2FFo%35WB%36JRXnf%2FC%32LD%2FoFXP%2F AH%38Wj%2FhbFj%2F%30Crn%2FAL%2BLRyMD%30JgDTNgrz%2F %38A%34WvY%2FwDQLuf%2B%2Fi%30f%38LXsf%2BgXc%2F%38A fxaXIx%33O%2BMY%39KjZB%36Vwh%2BK%31if%2BYXc%2F%38A fxaafinYH%2FmF%33P%38A%33%38WjkY%37o%37d%31HpVSYD% 30rkG%2BKFgf%38AmF%33P%2Ffxf%38Khf%34k%32Df%38wy%3 5%2F%37%2Br%2FhTUWK%35%31xA%39KTA%39K%34%37%2FAIWL Yf%38AQNuf%2B%2Fq%2F%34Uf%38LFsP%2Bgbc%2FwDf%31f%3 8ACnysLnY%34HpRgelcd%2FwALFsP%2Bgbc%2F%39%2FV%2Fwo %2F%34WLYf%39A%32%35%2FwC%2Fq%2F%34UcrC%35%32OB%36 UYFcd%2FwsWw%2F%36Btz%2FAN%2FV%2FwAKT%2FhYth%2F%30 Dbn%2FAL%2Br%2FhRysLnZYHpRgelcd%2FwsWw%2F%36Btz%2F AN%2FV%2FwAKP%2BFi%32H%2FQNuf%2B%2Fq%2F%34UcrC%35% 32OB%36UYHpXHf%38LFsP%2Bgbc%2F%38Af%31f%38KP%38AhY th%2FwBA%32%35%2F%37%2Br%2FhRysLnY%34HpUkYGelcV%2F wsWw%2F%36Btz%2FAN%2FV%2FwAKVfiPYA%2F%38g%32%35%2F %37%2Br%2FAIUcrC%35%36JEdqAgUC%36bzNuK%34NPifYKMHS %37n%2Fv%34v%38AhS%2F%38LO%30%33Of%37Kuf%38Av%34tC iwud%2BG%33c%31FO%35VeBXDj%34pWA%2F%35hdz%2FAN%2FF pG%2BKOnsMHSrn%2Fv%34tNJpiZ%31Uk%32eCKxNawbcmsaT%3 4i%36c%35z%2FZlyP%2B%32q%2FwCFUrzxvp%39zGU%2Fs%2B% 36H%2FAG%32X%2FCqaEizpgH%32%32utiA%38ocV%35%35beKN Pgm%38wWN%30f%2B%32y%2F%2FABNaq%2FEGwVdv%39nXP%2Ff %31f%38KlxZVzrd%32D%30q%35bSYIrhv%2BFgaf%38A%39A%3 2%35%2FwC%2Fq%2F%34VLH%38RtPQ%2F%38gy%35%2FwC%2Fq% 2F%34UuVhc%39HSY%37aTzWLVwS%2FE%2FTwMf%32Xc%2F%39% 2FFpf%2BFoaf%38A%39Au%35%2FwC%2Fi%30uVhc%39A%38zC% 31VuJeK%34k%2FFHTz%2FwAwu%35%2F%37%2BLUMnxK%30%39x %2FyDLn%2FAL%2BL%2FhRysLnUyyfNSKwPauPb%34g%36eTn%2 Bzbn%2Fv%36v%38AhQPiDYD%2FAJhtz%2F%33%39X%2FCnysLn aAD%30pcCuM%2F%34WJYf%39A%32%35%2F%37%2Br%2FAIUv%2 FCxbH%2FoG%33P%38A%33%39X%2FAAo%35WFzssD%30pcCuM%2 FwCFi%32P%2FAEDbn%2Fv%36v%2BFH%2FCxbH%2FoG%33P%38A %33%39X%2FAAo%35WFzs%38ClwK%34v%2FAIWLY%2F%38AQNuf %2B%2Fq%2F%34Uf%38LGsf%2Bgbc%2FwDf%31f%38ACnysLna% 34FIyK%32M%35BByCpwRXF%2FwDCxrH%2FAKBtz%2F%33%39X% 2FCl%2FwCFjWP%2FAEDbn%2Fv%36v%2BFHKwudn%35Z%2F%35% 37y%2Fkn%2FxNL%35Z%2FwCe%38v%35J%2FwDE%31xf%2FAAse x%2F%36Btz%2F%33%39X%2FCl%2F%34WRY%2F%39A%32%35%2F %37%2Br%2FAIUWYXO%30EZ%2F%35%37y%2Fkn%2FxNCxbVCieX AGBwn%2FxNcX%2Fwsix%2F%36Blz%2FwB%2FV%2Fwpf%2BFk%3 2P%38A%30DLn%2Fv%36v%2BFFmFztfLP%38Az%33l%2FJP%38A %34ml%38o%2F%38APeX%38k%2F%38Aia%34n%2FhZVj%2F%30D Ln%2Fv%36v%38AhS%2F%38LKsf%2BgZc%2FwDf%31f%38ACizC %35%32ghO%34nz%35skAfwf%2FABPvTvKP%2FPeX%38k%2F%2B Jrif%2BFl%32P%2FQMuf%38Av%36v%2BFL%2Fwsux%2F%36Blz %2FwB%2FV%2Fwoswudr%35Tf%38%39%35fyT%2F%34mjym%2Fw Ce%38v%35J%2FwDE%31xX%2FAAsux%2F%36Blz%2F%33%39X%2 FCj%2FhZlj%2F%30DLn%2FAL%2Br%2FhRZhc%37N%30IH%2Bvl %2FJP%2FiajAJP%2Bvl%2F%38c%2F%2BJrjm%2BJNi%33%2FMM uf%38Av%36v%2BFNHxHsB%2FzDLn%2Fv%36v%2BFWiXqdoFCjA zjOeTkk%30VnaRrcGr%36at%39FE%38Ks%37JsdgTxj%2FGioY zhdGs%37lNYi%38yCWMGOUAshH%2FLNqXxkjppFiHH%2FLeT%2 F%30Fa%39Gk%30nTodYsvslha%32%37M%37qWiiVCR%35b%38c CuX%2BLFoltpen%37BjM%37%2F%38AoIq%37%32dhWPMKKdGoa RVPQkCuuvdD%38P%32bX%2BRqbrYXSW%37jzowZN%2BeR%38nG MH%31zx%30pgcfRXaL%34QsTeSI%31%33OsEM%38tvLIccPuUR du%2B%38Z%2F%33T%30%37VJNA%30%2BxtZZr%30Xs%37wCCOa GB%31VlkkBY%38lTwAAMY%35PegDlqK%39GuNMhsbKLQrO%35v o%2FOiupHnhcIjlCRiUAZYYABGRjPQ%35qPXrd%39UjGnw%2Bb LJBqEUMsMjbFhJjxshJHCcMckDopwepAPPaK%39C%30vSNHs%3 5Z%32%2B%30O%31hd%36dvkLOSBidV%2B%38UQ%37Tgc%37eOc ZrIksW%31K%2BvotVWR%39VhIS%33soplhQRAE%2FIWVgVAxhQ RkZIJoA%35Siusm%30DTYoXERvVuIrGG%39MsjL%35R%33Fcpj Ge%2FBz%37Y%34yYtWgsbjx%35qMepTmGAzPghtu%35v%34QWw %32%30E%39%38HFAHMUV%31%31t%34WgYXSX%30U%39nL%2B%3 9NspuRITsTcchY%38MORzuXrxVXQ%32uYNH%31y%30mi%38pGs RMA%30QVmy%36YO%37GSMHjnHOaAOborsdDnvI%39PtbO%38dJ hfSxJZWM%33%33ABICZSB%39%30EgjPVsnriovGc%36%33lnZ% 33MU%39xPGJ%35%34zJdjEobcDt%2F%33ACMe%35PA%36UAcnR RRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQA UUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUU AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFF FABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAFr TdOu%39Vvo%37Kwi%38%32%34kzsTcFzgEnkkDoDV%2BXwtrcO sw%36RJZbb%36eMyRxeah%33LzznOP%34T%33%37UnhOfUrbxH ay%36NbxXF%36u%2FwAuOU%34U%2FIc%35%35HbPetvXdf%38A EWn%2BL%37PVdUsbSDUIbfbFEuWRkO%38ZOHPPzN%33%37CgDm %39Y%30fUNEultdUt%2FImdBIq%37%31bKkkZypI%36g%31Qrd %38Yapqeq%36wkus%32%30VvdRQInlxqRhTlxkEnn%35%36wqA O%39%38Kmb%2FhGovLzjz%35P%35LRXRfDWyjuPCKM%34BxPJ% 2FSiob%31GdHMf%38AidWP%2FXV%2F%2FRb%31ynxiOdL%30%3 7%2Frs%33%2FoNdNJ%2FyHLL%2Fro%2F%2Fot%36%35b%34v%2 FwDIL%30%37%2FAK%37N%2FwCg%31ctyVseWAkHIOCKme%38u% 35PN%38y%36mfzWDybpCd%37DoT%36nk%38%31BRQMsPfXj%2B Zvu%35%32%38xxI%2BZCdzDox%39T%37%30%2BHVNRguZLmC%2 Fuo%35%35f%39ZKkzBn%2BpByaqUUAWV%31C%2BS%32ltUvLhb eU%37pIhKwRz%36kZwafJqupTCES%36hduLcgwhpmPlkdCvPH% 34VTooAtz%36pqNyWNxf%33UpdNjGSZm%33LnODk%39M%38%34 py%36vqiQG%33TUrxYSnlmMTsFK%39NuM%34xyeKpUUAa%32q% 36%39eaikMIlnitooo%34%2FI%38%34lCyKBuxwMnGajOv%36% 32zq%37axqBZPuk%33L%35X%36c%31m%30UAXV%31fU%30SVE% 31G%38VZmLSqJ%32Adj%31Lc%38k%2B%39Oh%31vV%34E%32Qa rfRpgDalw%34GAMDofQAVQooAvnWtWNsLY%36pe%2BQAFEX%32 h%39oA%36DGcYqG%38v%37%32%2FZWvry%34uWQYUzSs%35Ue% 32TVaigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigAooooAKKWkoAKKWigBKKWigBKKWig BKKWigBKKWigBKKWigBKKWigBKKWigBKKWigBKKWigBKKWigBK KWigBKKWigBKKWigBKKWigBKKWigBKKWigBKKWigBKKWkoAKKW igBKKKKACiiigAoopaAEopaKAEopaKAEopaKAEopaKAEopaKAE opaSgAooooAKKKKACiiigAooooAKKKWgBKKWigBKKWigBKKWig BKKWigBKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiloA SilooASilooASilooASilooASilooASilooASilooASiiigAoo ooAKKKKACiiigAooooAKKKKACiiigAooooAu%36Pqc%2Bj%36n Ff%32qxtLFu%32iQEryCOxHrV%2B%2FwDFF%39f%36%37a%36v NFbC%34tlVUVUOwgEnkEn%31NYdFAHdXfxL%31E%33BNla%32o hKrgSqxYHAzyGAPOccdK%34WiigD%32n%34WHHg%35P%2Bu%38 n%39KKZ%38Lz%2FxR%36f%39d%35P%36UVD%33Gahljk%31uy% 38uRWPmOcA%2F%39M%33rmfi%39%2FyC%39O%2FwCuzf%38AoN djcf%38AIYsP%2Burf%2Bi%33rkfjEMaXp%33%2FXZv%2FQapu %37EjyiiiimAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRS%30AJS%30UUAJS%30UUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRR RQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAU UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUA FFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFF ABRRRQAUlLRQB%37J%38L%2F%38AkUE%2F%36%37yf%30oqX%3 4WAHwcn%2FAF%33k%2FpRWbeozbuP%2BQzYf%39dW%2F%39FvX JfGL%2FkF%36d%2F%31%32b%2F%30GutuP%2BQzYf%39dW%2Fw DRb%31yXxi%2F%35Benf%39dm%2F%39BquojyiiiiqAKKKKACi iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiii gAooooAKKKKACilooASilooASilooASilooASilooASilooASi looASilooASilooASilooASilooASilooASilooASilooASilo oASilooASilooASilooASilooASilooASilooASilooASilooA SilooASilooASilooASilooASilooASilooASilooASilooASi lpKACiiigAooooAKKKKACiiigAooooAKKKKACilooASilooASi looASilooASilooASilooASilooASilooASilooASilooASilo oASilooASilooASilooASilooASilooASilooASilooASilooA SilooASilooASilooASiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigD%32r%34V%2FwDInJ%2F%31%33k%2 FpRR%38LP%2BROT%2FrvJ%2FSis%33uM%32rj%2FAJDNh%2F%3 1%31b%2F%30W%39cl%38Yv%38AkF%36d%2FwBdm%2F%38AQa%3 6%32%34%2F%35DNh%2F%31%31b%2F%30W%39cl%38Yf%2BQXp% 33%2FXZv%2FQarqI%38ooooqxBRRS%30AJRS%30UAJRS%30UgE oopaBiUUtFACUUtFACUUtFACUUtFACUtFFMAooooEFFFFIYUUU UAFFFFABRS%30UAJRS%30UAJRS%30UAJRS%30UAJRS%30UAJRS %30UAJRS%30UAJRS%30UAJRS%30UAJS%30UYoAKKKKAEpaKKAE paKKACiiigAooooAKKKKACiiigAooooASilopgJRS%30UAJRS% 30UgEopaKYhKKWikAlFLRTGJRS%30UAJRS%30UCEopaKAEopaK AEopaKBiUUtFAhKKXFFACUUtFACUUtFACUUtFACUUtFACUUtFA CUUtFACUUtFACUUtFACUUtFACUUtFACUUtFACUUtFAxKKWigBK KWigBKKWigBKKWjFACUUtFACUUtFACUUtFAhKKWigBKKWigBKK WigBKKWigBKKWigBKKWigBKKWigBKKWigBKKWigBKKWigBKKXF FACUUtJQAUUtFACUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAe%30%2FCz%2FAJE%35P%2Bu%38n%39KKPhZ%2FyJyf%39d%3 5P%36UVk%39yjauP%38AkMWH%2FXVv%2FRb%31yXxh%2FwCQXp %33%2FAF%32b%2FwBBrrbj%2FkMWH%2FXVv%2FRb%31yXxh%2F %35Benf%39dm%2F%39BquojymiiirEFFFFABRRRQAUUUUAFFFF ABRRS%30AJRS%30UAJRS%30UAFFFFABRRRQAUUUUAFFFFABRRS %30AJRS%30UAJRS%30UAJRS%30UAFFFFACUtFFABRRS%30AJRS %30UAJRS%30UAJRS%30UAJRS%30UAJRS%30UAJRS%30UAJRS%3 0UAJRS%30UAJRS%30UAJRS%30UAJRS%30UAJRS%30UAJijFLRQ AlFLRQAlFLSUAFFFFABRRRQAUUUUAFFFFABSUtFACUUtFACUUt FACUUtFACUUtFACUUtFACUUtFACUUtFACUUtFACUUtFACUUtFA CUUtFACUUtFACUUtFACUUtFACUUtFACUUtFACUUtFACUUtFACU UtFACUUtFACUUtFACUUtFACUUtFACUUtFACUUtFACUUtFABRRS %30AJRS%30UAJRS%30UAJRS%30UAJRS%30UAJRS%30UAJRS%30 UAJRS%30UAJRRRQAmKKWigBKKWigBKKWigBKKWigBKKKKACiii gAooooAKKKKACiiigAooooA%39o%2BFn%2FInJ%2FwBd%35P%3 6UUfCz%2FkT%30%2FwCu%38n%39KKye%34zauP%2BQxYf%39dW %2FwDRb%31yXxg%2F%35Bmnf%39dm%2F%39Brrbj%2FkMWH%2F AF%31b%2FwBFvXJfGD%2FkGad%2F%31%32b%2FANBquoHlNLRR ViCiiigAooooAKKKWgBKKWigBKKWigBKKWigBKKWigBKKWigAo oooAKKWigBKKWigBKKWigAooooAKKWigBKKWigBKKWigBKKWig BKKWigBKXFFGKACilooASilooASilooASilooASilooASilooA SilxRQAlFLRQAlFLRQAlFLRQAlFLRQAlFLRQAlFLRQAlFLRQAl JS%30UAJRS%30UAJRS%30UAJRS%30UAJRS%30UAJRS%30UAJRS %30UCEopaKAEopaKYCUUtFACUUtFACUUtFACUUtFACUUtFACUU tFIBKKWkoAKKKKACilooASilooASilopgJRS%30UAJRS%30UAJ RS%30YoASilxRSASilooASilxRigBKKXFFACUUtFACUYpaKAEo paKAEopaKAEpaKKYBRS%30UAJRilooATFGKWigBMUYpaKAExRS %30UAJRilooASilooASkp%31FADaKdSUAJRS%30UAJRS%30UAJ RilooAbRTqSkAlFLRQAlFLRQAlFLRQMSilooASilpKAPZ%2FhZ %2FyJ%36f%39d%35P%36UUfC%33%2FkT%30%2F%36%37yf%30o rJ%37lG%31cf%38hiw%2FwCurf%38Aot%36%35P%34wf%38gzT v%2Buzf%2Bg%31%31lx%2FyGLD%2Frq%33%2Fot%36%35P%34v %2FwDIM%30%37%2FAK%37N%2FwCg%31fUR%35VRRRVkhRRS%30 AJRS%30UAJRS%30UAJRS%30UAJRS%30UAFFFFABRS%30UAJRS% 30UAJRS%30UAJS%30UUAFFLRQAlFLRQAlFLRQAUUuKMUAJRS%3 0UAJRS%34ooASjFLiigBKWlxRigBKMUuKMUAJiilxRikAmKMUt GKAExRilxRigBKKXFLigBtGKdijFMBtFOxRigBtGKdijFADcUY p%32KTFACUUuKXFADcUU%37FGKAG%30Yp%31FADcUYpaMUAJii lxRQAmKKWigBMUUtFADaKWloAbRS%34oxQAlFLijFACUUuKMUA JRS%30UAJRS%30UAJRS%30UAJRiloxQAlFLijFAhKMU%37FGKY DcUYp%32KKAG%30YpcUYoASilxRikAmKSnYoxQA%33FFLiigYl FLRQAlGKWlxQAlFLijFACUUuKMUCEopaMUAJRinYoxTAbiilxR ikAlFLijFAxKKXFFACUUtFACUUtFACUYpaKAExRS%30UAJiilo xQAlFLijFAhKKXFGKACkp%31GKAExRilxRigBKKXFGKYCUYpaK AExRilxRigBMUYpcUYoATFGKXFGKAExRilxRigBKKXFGKQDcUU %37FGKAG%30Yp%32KTFACYopcUYoASilxRigY%33FFOxRigBtF LijFACUUtJQAUlLRQAlFLRQB%37N%38Lf%2BRPX%2FAK%37yf% 30oo%2BFv%2FACKC%2FwDXeT%2BlFYy%33LNm%34%2FwCQxYf% 39dW%2F%39FvXJ%2FF%2F%2FAJBmnf%38AXZv%2FAEGusuP%2B QxYf%39dW%2F%39FvXJ%2FF%37%2FkGad%2F%31%32b%2F%30G r%36iex%35XRS%30VoQJRS%30UAJRS%30UAJRS%30tACUUtFAC UUtFACUUtFACUtFLQAlFLRQAlFLRQAlFLS%30AJRS%30UAJRS% 30UgEoxS%30tACUUtFACUUuKMUAJRilooATFLS%30UAJRS%30U DEoxS%30UAJRTqKAG%30U%36igBtFOoxQAmKMUtFAhMUYpcUYo ATFGKXFGKAExRilxRigBMUYpaKAExRS%34oxQAlFLijFMBKMUt GKAExSU%36jFADaKdRQA%33FGKdikoATFFLRQAlGKXFGKAEoxS %30UAJSYp%31FADaKdSUAJRS%30UAJijFLRQAmKKWigBKMUtLQ ISilxRigBKKWlxQA%32inYpKYCUUuKMUgEpKdijFADaMUuKMUA JRS%30UAJRS%30UAJRS%30UAJRS%34oxQAlFLiloAbilpcUYoA SilxS%30ANopcUYoAbRTqSgBKKWigBKKWigBKKWigYlFLRQAlF LiigBKKWlxQISilooASilooASjFLRQAlFLijFACUU%37FGKAEo paMUwEopcUYpAJRS%34oxQAlFLijFACUUtGKAEpKdRTAbRTsUY oAbijFOxSYpAJRS%34oxQA%33FGKdijFADaMUtFACUmKdiigY% 33FFLRQA%32inUUANop%31JQB%37J%38Lv%2BRQX%2FrvJ%2FS ij%34Xf%38igv%2FAF%33k%2FpRWEtyzZuP%2BQzYf%39dW%2F %39FvXKfF%37%2FkG%36d%2F%31%32b%2BVdXcf%38hmw%2F%3 6%36t%2F%36LeuU%2BL%33%2FIN%30%37%2Frs%33%38qv%37Q PY%38sopcUVoZiUUtFACUUtFACUUuKMUAFFFLTASilooASilxR QAlLRilxQAlFLiigBKKWikAlLRiloASjFLRQAlFLRigBKWlooA SilooASlxRilxQAmKMUtGKAExRilxRQAmKXFGKXFACYoxS%34o xQMTFGKXFGKBCUUuKMUAJijFLijFAxKMUtLigBuKMU%36jFAhu KMU%36igBuKMU%36igBtLS%34oxQAmKKXFGKAExRilxRimAmKK XFGKAG%34oxTsUYoAbijFLijFACUYpcUYoATFFLiigBuKKdRig BtGKdijFADcUYpcUYoASilxRigBtGKdiigBuKMU%36koAKMUtG KBCYoxS%34oxQAlLilxRimAmKMUuKMUAJijFOxRigBuKMU%37F JigBtGKdijFADcUUuKMUANoxTsUYpANoxTsUmKAExRS%34pcUA NpcUuKMUAJijFLijFMBMUU%37FGKAExRilxS%34oAbijFOxSYo AbijFOxSYpAJijFLiigBKMUtGKAuJijFLiigBKKXFGKAExRilx RigBMUYpcUYoATFGKXFFACYop%31JQAYopcUYoASilxRigBKMU uKKYCYoxTsUYoAbRTsUYoASilxRigBMUUuKMUAJijFLijFADcU U%37FGKAG%30Yp%32KMUANxRinYpMUAJijFLijFADcUYp%31GK QDcUYpcUYoAbijFOxRQA%32jFLijFADcUYp%32KMUDG%34pKdi igD%32H%34X%2F%38AIor%2FANd%35P%36UUvwv%2FAORRX%2F rvJ%2FSiueW%35ojYuP%2BQzYf%38AXVv%2FAEW%39cr%38Xf% 2BQbp%33%2FXZv%35V%31Vx%2FyGbD%2Frq%33%2Fot%36%35X %34uf%38g%37Tv%38Ars%33%38qtfEJ%37HltFLRWpAlGKWigQ lFLRQAlFLRTAMUUtFACUYpaKAEoxS%30UAJS%34paKAEopaKAE oxS%30UgCilooASilooASjFLS%30AJijFLRQAmKMUtLQAlGKWi gBMUUtFACYoxS%30tACYoxS%30UAJijFLRQAlFLRQAlFLS%30A Nop%31GKAExRilxRigBMUYpaKAExRilooATFFLRigBKMUtLimA %32lxS%30YoATFGKXFGKAEpKdijFADcUYpcUYoATFFLijFADcU U%36jFADaMU%37FGKAG%34oxTqMUCG%34oxTsUmKAExSYp%31F ADaMU%37FJigBMUYpaMUAJijFLRQAmKMUuKWgBMUYpcUUwExRi nYoxQAmKMUuKXFAhuKMU%37FGKAG%30Yp%32KMUANxSYp%32KM UANxRinYpMUANxRinYoxQMbijFOxSYoATFGKXFGKAExS%34pcU UAJijFLRigBMUYp%32KMUCExRilxS%34oATFJinYoxQA%33FJi n%34pMUDG%34pMU%37FFADcUYp%31GKAG%34oxTsUYoAbijFOx RigBuKMU%36jFADcUYp%32KKAG%34pcUtFACYoxS%34ooATFGK WjFACUU%36igBMUYpaKAExRilxS%34oAbijFOxRigBuKMU%37F FAhMUYpcUYoATFGKXFGKAG%34oxTqKAG%30U%37FGKAG%34oxT sUmKBiYoxS%34oxQA%33FGKdRigBuKMUtGKAG%34oxTsUYoAbi kxTsUUgG%34oxTsUUANxSYp%31FAHr%2FwAMP%2BRSX%2Fr%34 k%2FpRR%38MP%2BRSH%2FXxJ%2FSiuaW%35stjYuP%2BQzYf%3 8AXVv%2FAEW%39cr%38XP%2BQdp%33%2FXZv%35V%31Vx%2FyG bD%2Frq%33%2Fot%36%35b%34t%2FwDIO%30%37%2FAK%36t%2 FIVa%2BIT%32PLqKWitjISjFLRQAmKMUtFMBMUtFLQAmKKWigB KKXFFACUYp%31FACUUtFACUUtFACUUtLQAlFLRQAlFLRQAmKXF LRQAmKKWigBKXFLRQAlGKWigBKKWigAopaKAEoxS%34paAG%30 UtFACUYp%31FACUUuKKAEopaKAEoxS%30UBcSilooASilooASi nUUAJiilooATFFLS%34oENxRTsUYoAbRTqSgBKKXFFADaKdRig BtFLijFACYoxS%34oxQAmKKWigBKKWimA%33FFOxRikA%32jFL RQA%33FFOxRigBtGKdRTATFGKWjFACYpcUtFAhMUuKXFGKAExR inYoxTATFGKWlxQFxuKTFPxSYoAbijFOxRigBmKMU%37FGKQDc UmKfikxRYBuKMU%36igBuKMUtLQA%33FGKdRQAmKMU%36igBuK KdijFACYoxS%34pcUAJijFOxRimAzFGKdijFIBlFOxSYoAbijF OxRigBuKMU%37FFADaMU%36igBuKMU%37FGKBjaMU%37FGKBDa MU%37FGKBjcUuKWigBMUYpaKBCUYpaWgBtLilooATFFLRQAlFL RQAlFOxRigBtLS%30YoAbijFOxRigBuKMU%37FGKAG%34oxTqM UANxRTsUYoAbijFLRQAmKTFOooAbijFOxSYoC%34%33FFOxRQM bijFOxSUANxRinUYoAbikp%32KMUAeu%2FDH%2FkUx%2F%31%3 8Sf%30oo%2BGX%2FIpj%2Fr%34k%2FpRXJLdm%36%32Ne%34%2 F%35DNh%2F%31%31b%2FANFvXLfFv%2FkHad%2F%31%31b%2BQ rqbj%2FkM%32H%2FXVv%2FRb%31y%2Fxa%2F%35B%2Bnf%39dW %2FkKtfEhPY%38vopaK%33MhMUUuKMUxCUtFLQAlGKWigBKKWi gBMUYpaWgBMUUtFACUUtGKAEopcUtADaXFLRQAlFLiigBMUUtL QAlFLRQAlFLRQAlLS%30UAJRS%30YoASilooAKKWjFACUUtFAC UUtFACUtLRQAlFLiigBKMUtGKAEopaKAEopaKAEopaWgQlFLRi gBKKdijFACYopcUYpgJRS%30YoASkp%32KKAG%30UtGKQCUlOx RQAlFLRimAlJTsUYoASilxRigQ%33FGKdRigBtGKXFGKAExSU% 36jFAxtGKWjFACUUuKMUCEpaXFFACUtLijFACUuKXFGKYCUuKX FGKBCYoxTsUYoAbijFOxRigBuKTFPxSYoAbikp%2BKTFADcUU% 37FJigY%33FGKdijFIBuKMU%37FJQAmKMU%36jFACYoxS%34pc UwG%30Yp%31GKAExRS%34pcUCEpcUuKMUANxSEU%2FFJigBmKM U%37FJigYmKTFOxRikA%33FGKdijFADcUYp%31FADcUYpaKAEx RinYoxQA%33FGKdijFADaMU%36igBuKXFLRigBKKXFFACYoxS% 30tADaWlopgJijFLRQAlFLRQAlFLRQAlGKWigBKMUtLQA%32jF LRQAmKMUtFACYopaMUAJRilxRQA%33FFOxSYpAJSYp%32KMUAN xRinYpMUANxRinYooAbikp%32KMUDPWvhl%2FwAioP%38Ar%34 k%2FpRS%2FDP%38A%35FQf%39fEn%39KK%34%35fEzoWxrXH%2 FIZsP%2Burf%2Bi%33rl%2Fiz%2FAMg%2FT%2F%38Arq%33%38 hXUXH%2FIZsP%38Arq%33%2FAKLeuX%2BLP%2FIP%30%2F%38A %36%36v%2FACFaL%34kKWx%35jiiloroMRKKWloASilooEJRS% 30UAJRS%30UAFFFLQAlFLRQAlFLRQAlLS%30UAJRS%30UAJRS% 30UAJS%30UtAhKKWigBKKWigBKWiloASilooASilpaAEopaKAE opaKAEopaKAEopaKADFFFLQAlFLRQAlFLRQAlFLRQAlLRS%30A JiilpaYCUUtFACUUtLQISkp%31FADaKWigBtFLRQAlFLRQAlFL RQAlXk%30yVo%31fzYRuUMASc%38%2FhVKt%35f%39RD%2FwBc k%2FkKaVwbM%2F%38AsqX%2FAJ%37wfmf%38KP%37Kl%2F%35% 37wfmf%38K%30KWq%35UTczv%37Kl%2F%35%37wfmf%38ACj%2 Bypf%38AnvB%2BZ%2FwrQoo%35UFzO%2FsqX%2FnvB%2BZ%2Fw o%2FsqX%2FnvB%2BZ%2FwrQoo%35UO%35n%2F%32VL%2Fz%33g %2FM%2FwCFJ%2FZUv%2FPeD%38z%2FAIVoUlLlQXKH%39lyf%3 8%39%34PzP%38AhR%2FZcn%2FPeD%38z%2FhV%36kosguUv%37 Lk%2F%35%37wfmf%38KT%2BzJP%2Be%38H%35n%2FCr%31JRYL lL%2BzJP%2Be%38P%35n%2FCl%2Fs%32T%2FnvB%2BZ%2Fwq%3 5SUWC%35U%2Fs%31%2FwDnvD%2BZ%2FwAKP%37Of%2FnvD%2BZ %2Fwq%31RRYLlX%2Bzn%2FAOe%38P%35n%2FAAo%2Fs%39%2F% 2Be%38P%35n%2FCrNFFguV%2F%37Pf%38A%35%37w%2Fmf%38A Cj%37A%33%2FPaH%38z%2FAIVYpKLCuQfYG%2F%35%37w%2Fmf %38KPsLf%38APaH%38z%2FhU%31FOwXIfsLf%38APaH%38z%2F hSfYm%2F%35%37Q%2Fmf%38ACp%36SlYLkP%32Jv%2Be%30P%3 5n%2FCk%2BxH%2FntD%2BZ%2FwqaiiwEP%32I%2F%38APaH%38 z%2FhSfYj%2FAM%39%34fzP%2BFSmkosMgmtmiQOXRgTj%35Sa gxV%36%34%2F%34%38%31%2F%36%36H%2BVU%36QDcUmKdRigB uKMU%36igY%33FGKWloEJijFLS%30AJijFLRQAlFLS%30AJS%3 4opaYCYpMU%2BkxQIZikxTyKTFIY%33FJTsUYoAbijFOxRQMbi jFOooAbijFLRSATFFLRQAlFLS%30ANoxS%30UAJijFOopgNoxT qKAExRS%30UAJRS%30UCEoxS%30UAJRilooASilooAMUUtFACU UtFACYoxS%30UANop%31FADcUYp%31FADcUYpaKAEopaKBjaKd SYoASkxTqMUgG%34oxTsUUANxRS%34ooA%39Y%2BGf%2FIqj%2 Fr%34k%2FpRR%38NP%2BRV%2F%37eJP%36UVxT%2BJnVHY%31r j%2FkM%32H%2FXVv%38A%30W%39cx%38WP%2BPDT%2FwDrq%2F %38AIV%30%39x%2FyGbD%2Frq%33%2Fot%36%35j%34r%2F%38 eGn%2FAPXV%2FwCQrSPxIUtjzKiloroMBKKWimAlLS%30UAJRS %30UAJRS%30YoASloxS%30CEopaKAEopaKAEpaKWgBKKWigBKK WigBKKWloASilooASilooASilooEFFGKWgBMUtLRQAlJS%30UA FFFFABRS%30UAJRS%30UAJRS%30UAJRS%30UAFFFLQAlFLRTAS lopaAEpaKKBBRS%30UAJS%30UtACUlLRQAlJTqSgBKKWigBKKW igBKKWigBK%33l%2FwBRD%2F%31yX%2BQrCrdX%2FUw%2F%39c l%2FlVREwopaSqEJRS%30lACUUUlIApKWkNAxKKKSgApKKSgAp KWkoAKKKSgAoopKBBRRRQAUlLRQAlJTqQ%30AJSUtIaQCGkpaQ %30AE%2F%2FHmv%2FXQ%2Fyqnirk%33%2FAB%35r%2FwBdD%2F KquKQxtJinYooAbRS%30UAJRilooAMUYpaWgBtLS%30UAJiilo oAKXFFLTEJRinUYoAYRSYp%35FJigBmKTFOxRSGNoxS%30UDEo paKAExRilooAbRTqKAEoxS%30YoATFGKXFGKAExRS%34oxQAlF LijFACUUuKKAEopaMUAJRS%30YoASilooASilooASilpaBCUUU UAFFLRQAlFLRQAmKKWigBtFOoxQA%32ilooGJRiloxQAlJTsUU ANoxTqSkAlJTsUYoA%39V%2BGn%2FIrf%38AbxJ%2FSil%2BGv %38AyK%33%2FAG%38Sf%30orhn%38TOuOyNW%34%2F%35DNh%2 FwBdW%2F%38ARb%31zHxX%2FAOPDT%2F%38Arq%2F%38hXT%33 H%2FIZsP%38Arq%33%2FAKLeuZ%2BK%2FwDx%34af%2FANdX%2 FkK%30j%38aFLY%38zoopa%36TnEopaKACiiigAooxS%34pgJR S%30UgEopaKYCUtFFABRS%30UAJRS%30UCCiiloASilooASilo xQAlFLRQAUUtFACUUtGKACjFLiigQUlLRQAlFLRQMSilooASil ooASilooEFFFLQAlFLRigBKKWigAoopaYCUtFFABRS%30YoEFG KMUtACUUtFACUUtFACUlLRQAlFLRQAlFLRQAmKMUtFACYrdX%2 FUw%2F%38AXJf%35CsOtxf%38AUw%2F%39cl%2FlTQMKSlpKoQ UlFFACUlFJQAUhpTSUAJSUtJSAKSikoGFFJRQAVs%36P%34duN WgMsL%34C%39RgHHX%31I%39DWLXoPw%2F%2FwCPCf%38A%34D %2FNqmTsrjirs%34%33V%39Mk%30u%34EUjhs%35%35xjpVCu% 31%38d%32Dki%35QE%34%2Bb%39MH%2BhriqcXdXFJWYUUUUyQ ooooAKSlopgJSUtIaAG%30lOpKQBN%2Fx%36L%2F%31%30P%38 qq%34q%33L%2FwAei%2F%38AXQ%2FyqrikMTFJinYpMUAJRS%3 0UDEopaKAEpaKXFAhKKXFGKAExS%34pcUYoASlopaYgFFKKKAE xTSKfikIoAZikxTyKbikMSkp%31GKBjaKXFFACUUuKMUAJRilo oASilooASilooASilooASilooASilopAJRS%30UAJRS%30UAJR S%30UwEopaKADFGKKKACiiigAooooAKKWigBtLRRQAUUUUAFFF FACUUtFACUUtFIBKKXFJQAlGKWigD%31T%34a%2F%38AIr%2F% 39vEn%39KKPht%2FyK%2FwD%32%38Sf%30orgn%38TOyOyNW%3 4%2F%35DNh%2F%31%31b%2F%30W%39cz%38Vv%2BPDT%2FAPrq %2FwDIV%30%31x%2FwAhmw%2F%36%36t%2F%36LeuZ%2BK%33% 2FAB%34af%2F%31%31f%2BQrSPxoUtjzSilorqOcSloooAKKKK ACilooEJRS%30UAFFFFABRRS%30AJS%30UUAFFFFABRS%30UwE paKKACiiigAoopaAEopaKAEpcUUtAgopaSgBKKWigBKKWigBKW iigAooooAKKWigBKKWigBKKWigBKWiigApaKKBBRS%30UwCilo oASlopaAEopaKBCUlOpKAEopaKBjaKWigAooooAKKWigBK%32x %2FqYf%38Arkv%38qxa%32R%2Fqof%2Bua%2FwAqaEwoNFJTEF JRSGgYUlFJmgApKM%30lABSUGkpAFJRRmgApKKKACvQvh%2F%3 8A%38eE%2F%2FAf%35tXntehfD%2FwD%34%38J%2F%2BA%2Fza oqfCVDc%36O%2FtEvbVoX%37%39Djoa%38r%31rTJNNu%32Rlw hPHt%37V%36%37WVrmkxanakFR%35gHB%39fasoSszSUbnk%31 FW%39QsZbC%34MUgOM%38Ej%39KqV%30mAUUtFACUUtJQISkNL RQA%32kpxpKBhL%2Fx%36L%2F%31%30P%38AIVWq%31J%2Fx%3 6L%2Fvn%2BQqvSAbSU%36igBtFLRQMSjFLRQAlLRS%30AJiilp aBCYopaKAEpaKKACloFLTEJikxT%36TFADCKTFONJSGNopaKBj aMUtFIBMUUtFACUUtFACUUtFACUUtFACUUtFACUUtFACUUtJQA lFLRQMSilooASilooASloooAKKKKACiiigAooooAKKKKBBRRRQ AUUUtACUUUtAxKKKKACiiigBKKWigBKKWigD%31L%34bf%38iv %38A%39vEn%39KKX%34bf%38iuf%2BviT%2BlFcE%2FiZ%32R% 32RqXH%2FIZsP%2Burf%2Bi%33rmfit%2Fx%34%36f%2FwBdX% 2FkK%36a%34%2F%35DNh%2FwBdW%2F%38ARb%31zPxV%2F%34% 38dP%2FwCur%2FyFXH%34%30TLY%38%31opaK%36jASloopiCi iigAooooAWiiigAoopaAEopaKAEpaKKACiiigAoopaAEopaKAC iiigQUUUUAFLRSigAopaSmAUlLSUgCiiloASilooASloooAKKK KYBRRS%30AJRS%30UAJS%30UUAFFFLQIKKKWgAoopaBCUtFFMA opaKAEopaKAEopaSgBKKWigBKKKKQwooooEFFLRimAlbI%2F%3 1UP%2FXNf%35Vj%31sf%38sov%2Bua%2FyoQMSkpaSqEJRRSUg A%30%30%30tNoGFJS%30lACUlFJSAKKKKACikpaACvQfh%2F%3 8A%38eE%2F%2FAf%35tXn%31egeATjT%35%2FwDgP%38%32qKn wlQ%33OsJppNZus%33r%32dr%35yfwkn%36%38E%2F%30rG%30 nxfBdsEmUg%2Bp%36j%38O%2F%34VkotmnMjT%31%33SIdSgb% 35R%35mPz%2FAPr%31%35tf%32UtjcGKUH%2FZOOtesCZXUMpD KeQQetYuv%36ZFf%32%37YwHPQ%34%36Hsf%36VpBtaEyVzzmk p%30sbxStHIpV%30JVgexptamIUUUUxCUUUUDEpDSmkpALJ%2F x%36r%2FAL%35%2FkKgqw%2F%38Ax%36r%2FAL%35%2FkKgoGN opaKAG%30UtFIBKKWigBKWigUwCilooAKKKKACiiloEFLRS%30 AFJS%30UxDTTafSGkMZSU%34%30lIYlFLRQMSilpKACiiigApK WigBKKWigBKWiigBKKWigBKKWigBKKKKACkpaKQxKKWigBKKWi gQlFLRTAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiig ApKWigBKKWigD%31L%34bf%38AIrn%2FAK%2BJP%36UUfDf%2F AJFg%2FwDXxJ%2FSivPn%38TO%32OyNS%34%2F%35DNh%2F%31 %31b%2F%30W%39c%31%38Vf%2BPHT%2FAPrq%2FwDIV%30tx%2 FwAhmw%2F%36%36t%2F%36Leua%2BKv%2FAB%34%36f%2F%31% 31f%2BQq%34%2FGiZbHmtFFFdZgFFFFAgopaKACiiigAooooAK WkpaACiiigAooooAKKWigAooooAKKKKBBRRS%30wEpaKBQAU%3 6kpaBBSUUlAwpaSigBaKKKACiiigAooooAKKWigBKWiigAoooo AKKWigQUUUtABRRS%30xBRRRQAUUtFABRRRQAUUUUAFJS%30UA JRRRQAlFLRQAUUUtACUUtFABWt%2Fyzi%2F%36%35r%2FKsmtU %2FwCri%2F%36%35r%2FKmgCkozSZpiCkoJpM%30gA%30lFNJo GKTTaKKAEoopKACiikpALRSUtABXfeBDjTpv%2BA%2FzauBrvP A%35xps%33%2FAf%35tUz%32KhuaHiY%37tNYfX%2F%30E%31% 35lGSACDgjoRXput%2FPZOP%39lv%2FQTXmKfdogEjsvC%2BtF x%39mnbkf%35z%2FAI%31%30%38uGUqe%39eWW%38z%32%38%3 6TRnDIcivR%37G%34W%35sY%35VPGB%2BXb%2FAD%37U%32tQi zlPFtn%35V%33FdqPlnG%31v%38AeX%2FEYrAruPEsAn%30K%3 4%34%2BaB%31mX%31%36%37T%2BhrhutOJEtxaKKKokKQ%30tJ QAlIaU%30lADn%2F%34%39V%2F%33z%2FIVBU%37f%38eq%2F% 37%35%2FkKhpDEpKWigBKSlooGJRS%30UAJS%30UUAFLRRQIKK KKACiiloAKWkpaYBS%30UUCEppFPppoGNIpKcaaaQxKKWikAlF LSUDCiiigBKKWigBKKWigBKKWkoAKKKKACiiigApKWigBKKKKA CiiigBKWiigYUlLRQAlLRSUALRRRQIKKKKACiiigAooooAKKKK ACiiigAooooAKKKKACiiigD%31L%34b%2FAPIsH%2Fr%34k%2F pRR%38N%2F%2BRYP%2FXxJ%2FSivPn%38TO%32OyNS%34%2F%3 5DNh%2FwBdW%2F%38ARb%31zXxV%2F%34%38dP%2FwCur%2FyF dLcf%38hmw%2FwCurf%38Aot%36%35n%34q%2F%38eOn%2FwDX V%2F%35Crj%38aJlsebUUUV%31mAUUUUALRSUtAgooooAKKKKA ClpKWgAooooAKKKKAClpKKAFooooAKKKKYgpaSloAKWgUtABRS UUCCkoooGLRSUUALRRRQAUUUUAFFFFAC%30UlFAC%30UlLQAUt JRQIWikpaYBS%30lLQAUtJS%30CCiiloAKKKKAClpKWmAUlLSU AFFFFIBKKKKACiiigApaSloAKKKKACtQ%2FwCri%2F%36%35r% 2FKsutNvuRf%39c%31%2FlTQBTTQTSZpiCkNGaSkAUGikoGFJQ aSgAopKKACikooAWikzRmgBa%37rwUcaZN%2FwAB%2Fm%31cJm u%35%38HHGlS%2F%38B%2Fm%31TLYcdzV%31E%37reQf%38ATN %2F%2FAEE%31%35in%33RXpl%30d%30Ug%2F%36Zv%2F%36Ca% 38yT%37ooW%34SHV%32nhKcyae%30RP%33Af%35%2F%2FXri%3 6%36zwdxFN%36FWP%2FoNN%37CjubV%30oktLuMj%2FWW%30i% 2F%2BO%35%2FpXnKn%35a%39FlbENy%35%36JbyMf%2B%2BTXn KfdFC%33CQ%36lpKKogKM%30UlABSUUUAOb%2FAI%39l%2FwB% 38%2FwAhUNTN%2FwAey%2F%37%35%2FkKioGJSUtJQAUlLRSGJ RRRQAUUUUALRRRQIKWiigAooopgFLSUtAC%30tJS%30CEpDTqQ %30ANNNNONIaQxtFFFAwooooASiiigYUUUUgCiiigAooooAKSl pKACiiigAooooAKSlpKACiiigYUUUUAFFJRQAUUUUAFLSUUALR SUUALRRRQAUUUUAFFFJQAtFFFABRRRQIKKSloGFFFFAHqXw%33 %2FwCRYP%38A%31%38Sf%30oo%2BG%2F%38AyLB%2F%36%2BJP %36UV%35%38%2FiZ%32R%32RqXH%2FACGbD%2Frq%33%2Fot%3 6%35n%34q%2F%38AHjp%2F%2FXV%2F%35CumuP%38AkM%32H%2 FXVv%2FRb%31zPxW%2FwCPHT%2F%2Bur%2FyFXH%34%30KWx%3 5rS%30lLXWc%34UUUUAFFFFABS%30lFAC%30UUUCClpKKAFopK WgAooooAKKKKAFopKKYC%30UUUAFLRS%30CCiiimAlFFFIAooo oAKKKKAFopKWgAooooAKKKKACiiigApaSimAtFFFABS%30UUCF ooooAKWkpaBBS%30lLQAUUUUwCloooASiiigApKKKQBRRRQAUU UUAFFFFAC%30UUUAFaTfci%2FwCua%2FyrNrRf%37kX%2FAFzX %2BVMBCaSkozQAUUmaQmgBc%30lFJmgApKKSgBaSikzQAtJRSU ALRT%31hmYfLFIfoppTbXA%36wSj%36oaAI%36%37jwgf%2BJT J%2BH%38%32rhyCDggg%2B%39dt%34SONJk%2Bg%2Fm%31Jjju as%35ykn%2FXJ%2F%38A%30E%31%35mn%33RXpMrfJL%2FANcn %2FwDQTXmqfdFC%33Bj%38%31%32nhiLytLeQjkgAH%36kn%2F AArjoIjNOka%39WOK%37%36JBa%36dDEBgkbyPr%30%2FTFDCP ch%31KbydF%31KbP%38Ayw%38r%2FvsgVwi%38KK%36fxZciLT baxB%2FeTv%35%37j%30UcKPx%35P%34VzAoiKQtFJS%31RAUU UmaYBSGiikA%38%2F%38ey%2F%37%35%2FkKiqU%2F%38ew%2F %33z%2FIVFQMSiiigBKKKKQxKKKKACiiigBaKKKYhaKKKACiii gApaSigB%31FJS%30CFpKWkoAQ%30%30%30%34%30hoGNpKU%3 0lIYUUUUAFFFFAxKKKKACiiikAUlFFABRRRQAUUUlAC%30lFFA BRRRQMKKKKACikooAKKKKACiikpALRRSUALRRSUALRSUtMAooo oAKKKKACiiigAooooAKWkooAWkoooA%39T%2BG%2FwDyLB%2F% 36%2BJP%36UUfDb%2FkVz%2F%31%38Sf%30orz%35%2FEzsjsj UuP%2BQzYf%38AXVv%2FAEW%39cz%38Vv%2BPDT%2F%38Arq%2 F%38hXTXH%2FIZsP%38Arq%33%2FAKLeuZ%2BK%33%2FHhp%2F %38A%31%31f%2BQq%34%2FGhS%32PNaKSiuswFooooAWikooEL RSUtABS%30lFAC%30UlFAC%30UUUAFLSUUCFopKKAFooooAKWi lFMAFLSUUCFzSUlFABRRRQMKKKKAFopKWgAooooAKKKKBC%30U lFAC%30UlLQAUUUUAFLSUtMApaSloEFLSUtABS%30lFAhaKSlo AWikpaYBRRRQAUUlFABRRSZpALRSUUALRSUUALRRRQAUtJRQAt aD%2Fdi%2F%36%35r%2FACrOrQc%2FLH%2F%31zX%2BVMBtBNJ mkzQAtJmjNJQAZopKKACkzRSUAGaciPI%34RFLMegFIoLMFUZJ OAK%37rw%33oUVvbi%36ulDM%33QH%2BL%2F%36%33%38%36Td hpXMfS%2FC%31xdAST%2FKnrnA%2FPv%2BFdHa%2BHtPtcZG%3 8j%30GP%2Fr%2FAK%31qs%35b%36elMZgoyTU%33bKskRLZWaf dt%31%2FHJ%2FnQ%39rakfNBGPoAKa%38x%2Fh%34qFnJ%36nN FguQ%33OmafMpBUD%39f%35%30%33TrRbCCeJCCh%32%37MfU% 35%2FnUpamFqdguNmb%39%33L%2FANcn%2FwDQTXnafdr%30CY %35im%2F%36%34v%2F%36Ca%38%39T%37oprclnSeGrBWk%2B% 31XAwgGee%34%2FwDr%2FwAs%31u%33V%35BGj%33t%36%32IF PCjrIeyiuQh%31i%34hiWNURgowM%35%35%2BvNVLq%36uL%32 USXMhbb%39%31egUegFKzC%36SH%33%39%37LqV%2FLeT%38NI eFzwo%37AVDSUVS%30IYtLmm%35opgOpKKKYgpDRRSAkP%2FAB %36j%2FfP%38hUVSn%2Fj%31H%2B%2Bf%35CoqBiUUUUAJRRSU hhRRRQAUUUUALRSCloAKWkopgLRSUUCFopKWgBaWm%30tADqSi igQhpDS%30hoGIabSmkpDCikooGLSUUUAFFFJSAWkoooAKKSig BaKSigYUUUUAFFFJQAtFJRQAUUUUAFFJRSAKKKKBhRRRQAUUUl AC%30UlFAC%30UlFAC%30UlFAC%30UlLQAUUUUAFFJRQAtFFFA BRRRQB%36p%38Nv%2BRX%2F%37eJP%36UUnw%32%2F%35Ff%2F t%34k%2FpRXBP%34mdcdkatx%2FwAhmw%2F%36%36t%2F%36Le uZ%2BK%2F%2FAB%34af%2F%31%31f%2BQrprj%2FAJDNh%2F%3 1%31b%2F%30W%39cx%38V%2F%38Ajw%30%2F%2Frq%2F%38hVx %2BNClsea%30UlFdRgLRSUtABS%30lFAC%30UlFMBaKKKAClpK KBC%30UlLQAUUUUALRSUUALS%30lLQAtLSUUxC%30maM%30lAB RSUtIAooooAKWkooAWikopgLRRRQAUtJRQAtFJRQAtFJRQAtFF FAhaKSloAWikpaYC%30UlFAhaWkooAWikpaAFopKKYhaKSigBa SiikMKKSigBaKSigBaKSigBaKSloAKWkooAWr%37%2Fdj%2FAO ua%2FwAqz%36vyfdj%2FAOua%2FwAqAG%35pKTNGaYgzRSUhNA xc%30maKTNIBc%30maTNFAGt%34btPtmqIp%36Aj%38M%39%2F yzXo%37kAhVGFUYAHYVxHggj%2B%30Se%2Bf%38A%32Vq%37J% 32%32gk%31L%33KWwSSBB%37%31VZyTkmkdySSajLVSVgHFqYW ppamk%30CHFqYTSFqYTQMkTDGYH%2FnhJ%2F%36Ca%38%36X%3 7or%30AyCK%31vp%32%36RWsh%2FEjAH%36%31%35%38p%2BUU luSx%39FJmjNUSOzRTaWmAtLTaXNAhc%30UlFAC%30lFFAEh%2 FwCPUf%37%35%2FkKiqU%2F%38eo%2F%33z%2FIVFQAlFFFAwp KKKQBSUUUAFFFFAC%30UlLQAUUUUALRSUUALRSUUALS%30lFMQ %36lptLQAUhpaSgBppDSmkNIYlFJRQMKKKSkAtJRRQMKKKSgBa KSigAzRRRQAUUlFIBaKSigYtJRRQAUUlFAC%30UlFAC%30lFFA BRSUUALRSUUDFozSUUAFFFFABS%30lFABRRRQAUtJRQAtFJRmg BaKSjNAhaKSigD%31X%34bf%38iv%2FwBvEn%39KKPhr%2FwAi t%2F%32%38Sf%30orgn%38TOuOyNW%34%2FwCQzYf%39dW%2F% 39FvXMfFf%2FAI%38NP%2F%36%36v%2FIV%30%39x%2FyGbD%2 Frq%33%2Fot%36%35j%34sf%38eGn%2F%38AXV%2F%35Crj%38 aFLY%38zooorqMRaKSigBaKSigB%31FJRQIWikooAWikooAWlp KKYC%30UlFAC%30tJRQA%36lpopaBC%30ZpM%30maBC%35opKK Bi%30UlFAC%35opKKAFopKKAFpaSigBaKSigBaKSigBaKKKBC% 30UlFAC%30UlLTAWikpaAFopKKBDqKSimAtFJS%30ALRSUUCHU UlFAC%30UlFABRSUUALSUUUDCiiigApaSigBaKSigQtLTaWgBa vSH%35Y%2F%2Bua%2FyqhV%32Q%38R%2FwDXNf%35UANpM%30m aKAFzSUmaSgBc%30lGaTNAC%35pM%30lFAzb%38K%33YttUXJw Gx%2BnX%39Ca%37m%37bBCg%38da%38sjkaKRZEOGU%35Brt%3 9K%31VL%2B%33Xn%35%30ADL%33X%2FwCtS%36j%36GkWppNN% 33Ajg%30%30mmApNNJpCaaTSAUmms%32KWJJJ%33%32QIXPfHQ fU%39qz%39T%31%32%31%30gGO%30dLvUORuHMcJ%2FqaTYEPi q%39Fnp%34%30pG%2F%30m%34IkuAP%34FHKr%39e%39coOBQ% 38kk%30rzTOzyOSzMxySaSqSJY%37NLTRRmmIdS%35puaKBDs% 30tNpaYC%30tNpaBBRRSUASn%2Fj%31H%2B%2Bf%35CoqkP%2F AB%36j%2FfP%38hUVIYtJRSUAFFFJQAtJRSUDFopKKAFpabS%3 0ALRSUUCFopKWgApaSigBaKSigB%31LTRS%35pgLRSUGgQhpDQ aQ%30hiGkoNJSKFopKKACjNJRQAtJRRSGFFJRQAtFJRQAtJRSU ALRSUUALRSUUDFopKKACikopALRSUUALSUUUAFFJRQAtFJRQMW ikooAWikooAWikzRQAtFJRQAtFJmigBaKTNFAC%30UmaM%30Ae r%2FDX%2FkVv%2B%33iT%2BlFHw%30%2F%35Fb%2Ft%34k%2Fp RXBP%34mdMdjVuP%2BQzYf%38AXVv%2FAEW%39cx%38WP%2BPD T%2F%38Arq%2F%38hXT%33H%2FIZsP%38Arq%33%2FAKLeuY%2 BLH%2FIP%30%2F%38A%36%36v%2FACFaR%2BJCex%35lRRRXSY i%30UlFAC%30UlFAC%30UlLQAUtJRQAtFJRTAWiiigBaKSigBa UUlLTELS%30%32jNAhc%30maSigYtFJRSAXNFJRTAWlptLQAtF JRQAtFJRQAtGaSloELRSUUALRSUUALRSUtAC%30UlFADqKSigQ %36ikopgLRSUtAC%30UlFAhaWm%30tAC%30UlFMBc%30UlFIAo pKKAFopKKBi%30UlFAC%30UlFAhaKSloAWikooAWrsvSP%2FAK %35r%2FKqNXJekf%2FXNf%35UANzSZpM%30lMBc%30ZpM%30lA C%35pM%30maM%30gFzSZpM%30ZoAKfFNJDIJInZHXoQcVHmkzQ B%30Vn%34oZAFvrVZv%38AbRtjf%34GtOPxFoci%35Z%37%32E %39w%30Yb%2BRriqKQzt%32%31%37QU%36%33V%33L%37JDj%2 BZqnN%34ssY%2BLTS%35JT%32e%34l%2FwDZV%36%2FnXJ%30U WA%31NQ%38QapqMZiluPKgP%2FACxhGxf%30%36%2FjWYABSUu aaQh%32aM%30%33NLmmIdmjNNpaYh%31FJRmgB%32aXNNooEOp abmimA%36kopKAJj%2FwAeo%2F%33z%2FIVFUh%2F%34%39R%2 Fvn%2BQqKkAUUlJQAtFJRQMKKSigBaKSikAtFJRQAtLTaWmAtF JRQAuaM%30lGaAFopKKAHA%30tNzRQIdRSUUABpppTSGgYlJQa Q%30hhRSUUhhRRSUALmikooAXNJmikoGLRSUUALRSUUgCiikoA WikooAWikooGLmkpKKAFzRSUUALRSUUALSUZpKAFopKM%30ALR SUUgFopKKBi%35opKSgB%32aKbRQA%36im%35paAFopKKAFopK SgD%31n%34af%38AIq%2F%39vEn%39KKPhp%2FyKv%2FbxJ%2F SiuGfxM%36FsatwwOtWAHUSt%2FwCi%33rmPiz%2FyD%39P%2F AOur%2FwAhXSSH%2FicWP%2FXaT%2F%30B%36%35r%34s%2F%3 8AIP%30%2F%2Frq%2F%38hVr%34%30J%37HmdFJRXSZC%30UlL QAtFJRQAtFJRQAtFJRQAtLSUUxC%30UlFAC%30tJS%30ALRSUU xC%35pM%30UlFwFopKKQxaKSigBaKKKYC%30UlFAhaKSjNAC%3 0UmaWgAooooAWikooAWikooAWlptLQAtFJRTAdRSUUCHUUlGaA FopKM%30AOopM%30UxC%30tNpc%30ALRSZozQAtJSZooAWjNJm igBaKTNJmkA%36ikozQAtFJRQAtFJmjNMB%31FJRQAuauTHiP% 2Frmv%38qpVbmP%2Br%2F%36%35r%2FKgBmaTNJmkzQA%37NJm kzSUALmjNJmkzSAXNJmkzRmgBaM%30maTNAC%35ozTc%30UDFz S%35ptGaBDqM%30%33NLmmA%36ikozQIdS%35puaM%30xDqWm% 30uaAHUU%33NLmmIdmjNNpaAFzRSZozQBMf%2BPQf%37%35%2F kKhzUp%2F%34%39B%2F%31%30P%38AIVDSAWkzRSUALRSZpKBi %30UmaKAFopKM%30ALRTc%30uaAFopM%30UALRSZozQA%36im% 35ozQA%36im%35ozQA%37NLmm%35ozQA%36lzTc%30ZpiFpDRS GkMQ%30lFJSGGaKSigYtJSZopALRSUlADqSkzRmgYuaKTNJmgB %31FNzRQAuaKSigBaM%30lFAC%35pKKSkMXNFJRQAuaKSigBaS iigAoopM%30ALRSUZoAWikooAWkoooAKKSikAtFJRQMWikzRmg BaKSigQtFJRQB%36%33%38M%2F%38AkVR%2F%31%38Sf%30oo% 2BGf%38AyKg%2F%36%2BJP%36UVxT%2BJnQtjQlP%38AxOrIf% 39NZP%2FQHrmviuf%38AiX%36f%2FwBdX%2FkK%36mdANasSM% 38yvx%2F%32zeuX%2BLIxp%2Bn%2F%39dW%2FkKtfGgex%35lR SUtdBkLRSUUALRSZooAWikooELS%30lFAC%30UlFAC%30tJQKY C%30tJRTELRmkzRmi%34BmikzRmkMWikooEOopKKAFopKKYC%3 0UlFAC%30UmaXNABS%30lFAC%30UlFAC%30UlFAC%30tNpaAFo pKKBC%30tNpaYC%30UlFADqKTNFAC%30UlGaYhaWkooAXNGaSi gB%31JmkooAXNGaSjNAC%30lJRQAuaXNNooAdRTaWgBaKSjNAC %35opM%30UALS%30%33NGaAHVan%2FAOWf%2FXNf%35VUzVqc% 2F%36v%38A%36%35r%2FACoAjzRmm%35oJoAXNJmkozQAtJSZo zQAuaTNJmkzQAuaM%30maM%30ALmjNJmkzQA%37NGabS%30ALm lptFADs%30tNzS%35oELmlzTaXNMB%31GabmlzQIdmlzTc%30U xDqM%30%33NLmgB%32aM%30%33NGaAJyf%39EH%2FXQ%2FyFQ% 35qQn%2FRB%2FwBdD%2FIVFmgBaTNJmjNAC%30lJmikMXNFJSZ oAWjNJmjNAC%35ozSZozQA%37NGaSjNAC%35ozSZpM%30AOzRm m%30ZoAdmjNNzRmgB%32aM%30%33NLmgB%32aXNMzS%35pgLSU ZpM%30ABpKKSkMKTNGaSkMXNFJRQAUUmaKQC%30UlGaBi%30Ul JQAtFJRmgBaKTNFAC%30UlGaAFpKM%30lIBaKSigBaKSigBaKS igYtJRRQAUUlFAC%30UlGaAFopM%30ZpALSUZooAKM%30maM%3 0ALRSZooAWikooAWikzRQB%36%35%38Mv%2BRUH%2FXxJ%2FSi j%34Zf%38ioP%2BviT%2BlFcc%2FiZutjXuP%38AkM%32H%2FX Vv%2FRb%31y%33xb%2FwCQdp%33%2FAF%31b%2BQrqbj%2FkM% 32H%2FAF%31b%2FwBFvXLfFz%2FkHad%2F%31%31b%2BQq%31% 38SE%39jy%2BlzTaK%33IHUU%32loAWjNJRQIWikozQA%36iko oAWikpaYC%30tNpaBC%30ZpM%30Zp%33AWkpM%30UgFopM%30U DFopKKBC%35pabS%30ALRSUUALRmkzRmgBc%30UlGaYDqKbRQA %37NFJmigBaKSigBaWm%30tAhaM%30lFAC%30uabS%30wFozSZ ooAdRTaXNAC%30UlFAhaWm%30tMBaKTNFAC%35ozSZozQAuaKT NJmgBaKTNFIBaM%30lGaAFozSUZoAdmikzRmmAtFJRmgBaKSig B%31WZz%2Fq%2F%2Bua%2FyqpVyaORxGURmHlryBntQBBmjNO% 38mb%2FnlJ%2F%33yaPJm%2F%35%35P%2F%33yaAGZozTvJm%2 F%35%35Sf%39%38mjyZv%38AnlJ%2F%33yaAGZozTvJm%2FwCe Un%2FfJo%38ib%2FnlJ%2F%33yaAGUZp%33kTf%38APKT%2FAL %35NHkzf%38%38pP%2B%2BTQA%33NJmn%2BTN%2Fzyk%2F%37% 35NHkTf%38%38pP%2B%2BTQAyin%2BRN%2FwA%38pP%38Avk%3 0eRN%2Fzyk%2F%37%35NADKWneRN%2Fzyk%2F%37%35NHkTf%3 8APKT%2FAL%35NADc%30U%2FyJv%2BeUn%2FfJo%38ib%2FnlJ %2FwB%38mgBtGad%35E%33%2FPKT%2Fvk%30vkzf%38APKT%2F AL%35NMQ%33NGad%35M%33%2FPKT%2Fvk%30vkzf%38APJ%2F% 2B%2BTQA%33NLml%38mb%2Fnk%2F%2FfJpfJm%2F%35%35P%2F AN%38mgQ%33NGad%35M%33%2FPJ%2F%38Avk%30vkzf%38%38n %2F%37%35NMBuaM%30%37yZv%2BeT%2FAPfJo%38mb%2Fnk%2F %2FfJoEJRmneTN%2FwA%38n%2F%37%35NHkzf%38%38n%2FwC% 2BTQA%38n%2FQx%2FwBdD%2FIVDUzqyWih%31KneeCMdhUGaAF zRmm%35ozQMWjNJmkzQAuaKTNGaQC%30ZpuaM%30DHUmaTNGaA HZozTc%30ZoEOozTc%30UDHZozTc%30ZoAdmjNNooAdmjNNozQ A%2FNGabmjNAh%32aM%30maSmApNJmkozSGBpKDSUhhRSUUgFz RSUZoAWim%35ozQMXNFJRQAtFJRmgBaKTNGaAFozSUmaAFopKM %30gFopM%30UALmjNJRQAtGaSkoAdSUmaM%30DFopKM%30ALRS ZooAWikpM%30gHUlJRQAuaKSigBc%30ZpKKAFzRmkooAXNGaSi gD%31%37%34Zf%38imP%2BviT%2BlFHwx%2F%35FMf%39fEn%3 9KK%35Jbs%32Wxr%33H%2FIZsP%38Arq%33%2FAKLeuV%2BLn% 2FIO%30%37%2Frs%33%38q%36q%34%2F%35DNh%2FwBdW%2F%3 8ARb%31yvxd%2F%35Bunf%39dm%2FlVr%34gex%35dRSZozWxA %36im%35paAFopM%30ZoELRSUUALS%30lFMBaWkooEOozSZpM% 30AOzSZpM%30maAHZopuaWgYtFJRmgBaKTNGaBC%30UmaKAFpa bS%30ALmjNJRQAtFJmigBc%30ZpKKAFpabRTAdRSZozQAuaKTN GaBDs%30ZpKM%30ALmlpuaM%30wHUUmaM%30ALRmkzRmgQ%37N GabS%30ALmikooAXNLTaM%30wHUmaTNGaAFzRSZopALRmkooAX NGaSigBaM%30lFAC%30tNzRmgB%32aM%30%33NLmmAuaM%30ma KAFzThK%34GA%37Y%2BtMozQA%2FzZP%37%37fnR%35sn%39%3 9vzpmaKAH%2BbJ%2Ffb%38%36PNk%2Fvt%2BdMzRmkA%2FzX%2 Fvt%2BdHmyf%33%32%2FOmUUAP%38ANf%38Avt%2BdHmyf%33% 32%2FOmUmaAJPMk%2Fvt%2BdHmv%2Ffb%38%36jpaAH%2Ba%2F %38Afb%38%36PNf%2B%2B%33%35%31HmlzQA%2FzX%2Fvt%2Bd HmP%2Ffb%38%36ZRmgCTzJP%37%37fnR%35r%2F%33%32%2FOo %38%30ZpgSeY%2FwDfb%38%36XzX%2Fvt%2BdR%35ozQIk%38x %2FwC%2B%33%35%30vmP%38A%33%32%2FOo%38%30ZpgSeY%2F %38Afb%38%36PMf%2B%2B%33%35%30zNGaAJPMf%2B%2B%33%3 5%30eY%2FwDfb%38%36ZmjNMRJ%35j%2FwB%39vzo%38x%2F%3 7%37fnUeaXNAD%2FMf%2B%2B%33%35%30vmP%2Ffb%38%36jzR mgB%35djwWJ%2BppuaTNGaAFzSZpM%30ZoAXNGaTNGaAFpM%30 maM%30hi%30UmaM%30ALmjNNzRmgB%32aM%30maM%30ALRmkzR mgBc%30ZpM%30maAHZozTc%30ZoAdmjNNzRmgB%32aM%30lGaA HZozTaWgQZopKTNAxaTNJRSGGaKTNFIBaM%30%32jNAC%30UlG aBi%30ZpM%30ZoAXNGaTNJSAXNFJmjNAC%35ozSZozQAtGaTNG aAFozSZozQAuaKbmjNAC%35ozSZozQMWjNJRQAtFJRQAtJmiko AWjNJRmkAuaM%30lFAC%30ZpKKAFzSZpKKAHUlJmjNAC%30Uma KAPYPhh%2FyKQ%2F%36%2BJP%36UUfDD%2FkUl%2F%36%2BJP% 36UVyy%33ZstjYuP%2BQzYf%39dW%2FwDRb%31ynxe%2F%35Bu nf%39dm%2FlXV%33H%2FIZsP%38Arq%33%2FAKLeuU%2BL%33% 2FIN%30%37%2Frs%33%38qtfEI%38topKK%31JFozSUUxDqKbR QA%36ikooAWlpKKAHUUlGaYhc%30ZpM%30lIBc%30UlFAxaWm% 30UAOzRTaKAHUU%32loELRSUUwFopKKAHUZpuaM%30AOzRmkzR mgBc%30UmaKAFozSUUAOoptGaAHUUmaM%30CFpc%30%33NFADq M%30lFAC%30tNopgOoptLQAtFJRQIdRTaKAHZopuaKAHZozTaK AHZozTc%30ZoAdmkzSZooAXNLmm%35ooAdmim%30UAOopKKAFo pKKAHUZptGaAHZopuaM%30AOoptFAC%30UlFAC%30ZpKKAFzRm kzRQAuaM%30lFAC%30UmaM%30ALS%35puaKAHZopuaXNMB%31F Npc%30ALmlzTc%30ZoEOzS%30%33NGaYDs%30U%33NLQIdmjNN zRmmA%37NLmm%35ozQAuaM%30maM%30ALmjNNzRmkAtGaTNJmg B%32aM%30%32igYtGaTNJmgB%32aM%30%33NFIB%32aM%30%33 NLmgBc%30ZptLmgBaM%30%32jNADs%30ZpuaM%30AOzRmm%35o zQA%37NGabmlzQA%37NGabmjNMB%32aSkzRQAUUlJSGLmkzSUU gFzRmkozQMXNFJmkoAdmkpM%30UALRSZozSAWikzRmgBaKbmjN ADqSkooAWikooAWikooGLmjNJRQAuaM%30%32igB%32aTNJRmg Bc%30ZpM%30UALmikzRmgBaKSjNAC%30U%33NGaAFopM%30ZoA WikooAWikooA%39i%2BGH%2FIpL%2F%31%33k%2FpRR%38L%2F APkUV%2F%36%37yf%30orlluzVGxcf%38AIZsP%2Burf%2Bi%3 3rlPi%2F%2FwAg%33Tv%2Buzfyrq%37j%2FkM%32H%2FXVv%2F Rb%31yfxf%2F%35Bunf%39dm%2F%39Bq%2FtCPLKKKK%30JCii igBaKSimAtFJS%30ALRSUUwFozSUUALmikopALRSUUALRSUUAL mjNJRTAWikooAdRTaM%30AOopuaWgQtFJRQAtFJRmgBaKTNFAD qM%30%32lzQAuaKSigBaWm%30ZoAdRSUZpiFpabmjNADqM%30m aM%30ALmikooAXNLTaKAHUUlFAhaKSjNAC%35opM%30maBjqKb migB%31FNooAdRTaKAHUZpKKAFzRmkzRmgBaWm%35ozQIdmim% 35ooAdRTaKAHUU%33NFADqKbRQMdmkpKKAFopKKAFopKKAHUU% 32igB%31FNooEOopuaXNADqM%30%33NFMB%32aWm%35ooAdmlz TKWgQ%36jNNzRmmA%37NLmm%35ozQIdmjNNzRmgB%32aM%30%3 3NGaAHZozTc%30ZoGLRSZpM%30AOzSUmaM%30gFopM%30lADqM %30%32igB%31GabRmgB%32aKbRmgB%32aM%30%33NFADs%30Zp tFADqM%30%32igY%36im%30ZoAdmlzTc%30ZoEOzSUmaM%30AL SZpKSgYuaKTNJmkAtGaSigYtGaSigBaKbmjNAC%30UmaM%30AL RSUUALmikooAWim%30UAOoptGaQx%32aKbRmgBaKTNGaAFozSU UALRSUUALRTaKAHUlJRQAtFJRQAtFJRQAtFJRQAtFJRQAtFJRQ B%37H%38L%2FAPkUV%2F%36%37yf%30oo%2BF%33%2FIor%2Fw Bd%35P%36UVzS%33NEbNx%2FyGbD%2Frq%33%2Fot%36%35P%3 4v%38A%2FIM%30%37%2Frs%33%2FoNdZcf%38hmw%2FwCurf%3 8Aot%36%35P%34wf%38gzTv%2Buzf%2Bg%31XUR%35XRSUVoIW ikooAWlpKKAFopKKYhaKSii%34C%30UlGaAFopKM%30ALRSUUA LRRRQAUtJRQAtFJRQAtFJRQAtFJRTAWikooAWikoouAtFFFABR RRQAtFJRQAtFJRTAXNLTaKAHUUmaM%30CFopM%30ZoAWjNJRmg B%32aM%30%33NGaAHZozSZozQAuaM%30maM%30ALmjNJmjNAC% 35ozTc%30ZoAdmjNNzRQA%37NFJmigBc%30UlGaAFozSZozQA% 37NGabmjNMB%32aKbmjNADqM%30%33NGaQDqKbmjNADs%30Zpu aM%30wHZozTc%30ZpALRmkzRmgBc%30ZpM%30ZoAdmim%35ozQ A%37NGabmjNADqM%30%33NLmmA%36im%35ozQIdS%35puaM%30 AOzRmm%35ozQA%37NLmm%35ozQIdmjNNzRmmA%37NLmm%35ozQ A%36im%35ozQAuaM%30maM%30ALmjNNzRmkAuaM%30maM%30DF zRmm%35ozQA%37NGabmjNADs%30ZpuaM%30AOzRmm%35ozQA%3 7NFNzRmgB%32aM%30%33NGaAFzRmkzRmgBc%30ZpM%30ZoAdmj NNzRmgB%2BaTNJmjNAC%30lJmjNAC%30lJRQMXNJmkopALmjNJ RQAtGaSigBc%30UmaM%30ALSUUUAFFFFABRRSUDFopKKQC%30U maM%30ALRSUUALRSUUALRSUUALRSUUALRSUUALSUUUAFFFJSAW ikooAWikooAWikooA%39l%2BF%33%2FIoL%2FwBd%35P%36UUf C%37%2FkUF%2FwCu%38n%39KKwluWbNx%2FwAhmw%2F%36%36t %2F%36LeuT%2BMH%2FACDNO%2F%36%37N%2F%36DXWXH%2FIZs P%2Burf%2Bi%33rk%2FjB%2FyDNO%2F%36%37N%2F%36DVdRHl VFJRViFopKKAFooooAWikozQAUUUUAFFFFABS%30lFAC%30UlF AC%30UlFAC%30UlFAC%35ozSUUwFzRmkooAWikpaLgFFFFFwFo pKKAFopKKLgLRSZooELRSUU%37gLRRRQAtFJRQAtFJRRcBaKSi mAtFJRQAtFJS%30XAKKKKLgFFFFABRRRQAUUUUAFFFFABRRRQA tFJRQAtFJRRcBaKSii%34C%30UlFFwFopKKLgLRSUUXAWikoou AtFJRRcBaKSii%34C%30UlFFwFopKKLgLRSUUALRSUUAOozSUU wFzRmkooAXNLmm%30UCHZozTaWgB%32aM%30%33NGaAHZozTc% 30ZpgOzRTc%30ZoAdRmm%35ozQA%37NJmkzRmkAuaM%30lJQA% 37NGabRQA%37NJmkooAXNLmm%30UAOzRmm%30UALmjNJRQAuaM %30lFAC%35ozSUUALmjNJRQA%37NGabRQA%37NGabS%30ALSUl FAC%30UlFAwoopKQC%30UlFAC%30UlFAC%30UlFIBaKSigBaKS igBaSiigBaKSigAooooAKKKKACiikouAtFJRSAWikooAWikoou AtFJRQAtFJRQAtFJRQAtFJRQAtFJRQB%37N%38Lv%2BRQX%2Fr vJ%2FSij%34W%2F%38igv%2FAF%33k%2FpRWEtyzZuP%2BQzYf %39dW%2F%39FvXJ%2FGD%2FkGad%2F%31%32b%2F%30GusuP%2 BQzYf%39dW%2FwDRb%31yXxh%2F%35Bmnf%39dm%2F%39Bq%2B ojyqiiirEFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABS%3 0lFAC%30ZpKKAFopKKAFopKKAFopKKAFopKKAFooooAKWkooAW ikooAWikooAWikooAWikopgLRRRQAUUUUALRSUUXAWikoouAtF JRRcBaKSii%34C%30UlFFwFopKKLgLRSUUXAWikoouAtFJRQAt FJRRcQtFJRRcBaKSigBaKSigBaKSigBaKSigBaKSigBaKSii%3 4C%30ZpKKLgLRSUUALRSUUALS%30lFO%34C%30UlFFwFopKKLg LRSZozRcBaWm%35pc%30%37gLRSUUXAWikoouAtFJRRcBaKSii %34C%30UlFAC%30UlFFwFpKKKACikpaVwCiiii%34BRRSZoAWi iigAopKKAFopKKLgLRSUuaLgFFGaKLgFLSUUwFpKKKACiikpAL RSUUgCiiigAooooAKKKKACiiigAoopKAFopKKQC%30UlFAC%30 UlFAC%30UlFAxaKSigBaKSigBaKSigBaKSigBaKSigBaKSigAo oooAKKKKACiiigD%32f%34W%2F%38iev%2FXeT%2BlFHwt%2F% 35E%39P%2Bu%38n%39KKxe%35Rs%33H%2FIZsP%38Arq%33%2F AKLeuS%2BMP%2FIM%30%37%2Frs%33%2FoNdVLKH%31mwAVh%2 B%38br%2FwBc%33rlfjAc%36Zp%33%2FAF%32b%2FwBBq%33%3 8QjyqkooqxBS%30lLQAUUlFAC%30UlLQAUUUUAFFFFABRRSUAL RSUUALRSUUALRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAU UUUAFLSUUALRSUUALRSUUALRSUtABRSUUALRSUtABRRRQAUUUU AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAC%30UlFAC%30 UlFAC%30UlFAC%30UlFAC%30UlFAC%30UlFAC%30UlFAC%30Ul FAC%30UlFAC%30UlFAC%30UlFAC%30UlFAC%30UUUALSUUUwFo pKKLgLRSUUXAWikoouAtFJRRcBaKSii%34C%30UlFFwFopKKLg LRSUUALRSUUALRSUUALRSUUXAWikooAWikooAWikopALRSUUAL RSUUwFopKKAFopKKAFpKKKACiiikAUUUUAFFFFABRRRQAUUlFA C%30UlFAC%30UlFAC%30UlFAC%30UlFAC%30UlFAC%30UlFAC% 30UlFAC%30UlFAC%30UlFABRRRQAUUUUAFFFFABRRRQAUUUUAe z%2FC%33%2FkT%30%2FwCu%38n%39KKT%34WnHhBf%2Bu%38n% 39KKxluUjYl%2F%35DNh%2FwBdG%2F%38ARb%31yvxh%2F%35B mnf%39dm%2FwDQa%36uX%2FkM%32H%2FXRv%2FRb%31ynxh%2F %35Benf%39dm%2F%39BrR%2FELoeU%30UlLVCCiiikAUUUUAFF FFMAooooAKKKKACiiigYUUUUCCiiigBaKSigBaKSigYtFJRQIW ikooAWikooAWikooAWiiigAooooAKKKKACiiigAopKWgAooooA KKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKK KKACiiigBaKSigBaKSigBaKSigBaKSigBaKSigBaKSigBaKSig BaKSigBaKSigBaKSigBaKSigBaKSigBaKSigBaKSloAKKKKACi iigAooooAKWkooAWkoooAKKKKACiiigAooooAKKKKACiiigAoo ooAKKKKACiiigAooooAKKKKACiiigAooooAWikooAWikooAKKK KACiikoAWikooAWikooAWikooAWikooAWikooAWikooAWikooA WikooAWikooAWikooAWikooAWkoooAKKKKACiiigAooooAKKKK ACiiigD%32f%34Wj%2Fij%31%2F%36%37yf%30opfhZ%2FyJ%3 6%2F%38AXeT%2BlFYy%33KNiX%2FkM%32H%2FXRv%38A%30W%3 9cp%38Yf%2BQXp%33%2FXZv%2FQa%36uX%2FAJDNh%2F%31%30 b%2F%30W%39cp%38Yf%38AkF%36d%2FwBdm%2F%38AQa%30fxC %36HlFFFFMAooooAKKKKACiiigAooooAKKKKYBRRRQIWikopAL RSUUwFoopKAFopKWgAooopAFFFFABRRRTAKKKKACiiigAooooG FFFFAgooooAWikooAWikooAWikooAWikooAWikooAWikooAWik ooAWikooAWikooAWikpaACiiigAooooAKKKKACiiigAooooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKK ACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiig AooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAo oooAKKKKACiiigD%32f%34Wf%38AInr%2FANd%35P%36UUfCz% 2FAJE%39f%2Bu%38n%39KKxluUbMv%2FACGbD%2Fro%33%2Fot %36%35T%34xf%38AIL%30%37%2Frs%33%2FoNdXL%2FyGbD%2F AK%36N%2FwCi%33rlPjF%2FyC%39O%2F%36%37N%2F%36DWj%2 BISPKKKUAsQFBJPYVJ%39mn%2F%35%34S%2F%38AfBpgRUVL%3 9mn%2FAOeEv%2FfBo%2BzT%2FwDPCX%2Fvg%30ARUVL%39mn%2 F%35%34S%2F%39%38Gj%37NP%38A%38%38Jf%2B%2BDQBFRUv% 32af%2FnhL%2FwB%38Gj%37NP%2Fzwl%2F%37%34NAEVFS%2FZ %37j%2FnhJ%2F%33waPs%39x%2Fzwk%2F%37%34NAEVFS%2FZ% 35%2F%2BeEv%2FAHwaPs%38%2F%2FPCX%2Fvg%30ARUVL%39nn %2FwCeEv%38A%33waPs%38%2F%2FADwl%2FwC%2BDQBFRUv%32 af%38A%35%34Sf%39%38Gj%37NP%2FAM%38JP%2B%2BDQBFRUv %32af%2FnhJ%2F%33waPs%30%2FwDzwk%2F%37%34NAEVFS%2F Zp%2F%2BeEn%2FAHwaPs%30%2F%2FPCT%2Fvg%30ARUVL%39mn %2FwCeEn%2FfBo%2BzT%2F%38APCT%2FAL%34NAEVFS%2FZp%2 FwDnhJ%2F%33waPs%30%2F%38Azwk%2F%37%34NAEVFS%2FZp% 2F%2BeEn%2FfBo%2BzT%2FAPPCT%2Fvg%30wIqKl%2BzT%2F%3 8APCT%2FAL%34NH%32af%2FnhJ%2FwB%38GkBFRUv%32af%38A %35%34Sf%39%38GnR%32d%31JIqR%32%38rMxwAEPJpgQUtbP% 2FCKa%2F%38A%39Ayb%38x%2FjVG%37%30u%2FspvKurSaN%38 ZwVp%38rQroqUVJ%39mn%2FwCeEn%2FfBo%2BzT%2F%38APCT% 2FAL%34NICOipPs%30%2FwDzwk%2F%37%34NH%32af%38A%35% 34Sf%39%38GgCOipPs%30%2F%2FPCT%2Fvg%30fZp%2F%2BeEn %2FfBoAjoqT%37NP%2FwA%38JP%38Avg%30fZp%2F%2BeEn%2F AHwaAI%36Kk%2Bzz%2FwDPCT%2Fvg%30fZ%35%2F%38AnhJ%2F %33waAI%36Kk%2Bzz%2FAPPCX%2Fvk%30fZ%35%2FwDnhJ%2F% 33waBkdFS%2FZ%35%2F%2BeEn%2FAHwaPs%38%2F%2FPCT%2Fv g%30ARUVL%39nn%2FwCeEn%2FfBo%2Bzz%2F%38APCX%2FAL%3 4NAiKipfs%38%2FwDzwk%2F%37%34NH%32af%38A%35%34Sf%3 9%38GgCKipfs%38%2F%2FPCT%2Fvg%30fZ%35%2F%2BeEn%2Ff BoAioqX%37PP%2FwA%38JP%38Avg%30fZ%35%2F%2BeEn%2FAH waAIqKl%2Bzz%2FwDPCT%2Fvg%30fZp%2F%38AnhJ%2F%33waA IqKl%2BzT%2FAPPCT%2Fvg%30fZp%2FwDnhJ%2F%33waAIqKl% 2BzT%2F%38%38JP%2B%2BDR%39mn%2F%35%34Sf%39%38GgZFR Uv%32af%2FAJ%34Sf%39%38Gj%37NP%2FwA%38JP%38Avg%30A RUVL%39mn%2FAOeEn%2FfBo%2BzT%2FwDPCT%2Fvg%30ARUVL% 39mn%2F%35%34Sf%39%38Gj%37NP%38A%38%38JP%2B%2BDQIi oqX%37NP%2FwA%38JP%38Avg%30fZp%2F%2BeEn%2FAHwaBkVF S%2FZp%2FwDnhJ%2F%33waPs%30%2F%38Azwk%2F%37%34NAEV FS%2FZp%2F%2BeEn%2FfBo%2BzT%2FAPPCT%2Fvg%30ARUVL%3 9mn%2F%35%34Sf%38AfBo%2BzT%2F%38%38JP%2B%2BDQIioqX %37NP%2FAM%38JP%2B%2BDR%39mn%2FwCeEn%2FfBoAioqX%37 NP%38A%38%38JP%2B%2BDR%39mn%2FAOeEn%2FfBoAioqX%37N P%2Fzwk%2F%37%34NH%32af%2FnhJ%2F%33waAIqKl%2BzT%2F %38APCT%2FAL%34NH%32af%2FnhJ%2FwB%38GgCOipPs%38%2F %38Azwk%2F%37%34NH%32ef%2FAJ%34Sf%39%38GgCOipPs%38 %2FwDzwk%2F%37%34NH%32ef%38A%35%34Sf%39%38GgCOipPs %38%2F%2FPCT%2Fvg%30fZ%35%2F%2BeEn%2FfBoAjoqT%37PP %2FwA%38JP%38Avg%30fZp%2F%2BeEn%2FAHwaAI%36Kk%2BzT %2FwDPCT%2Fvg%30fZp%2F%38AnhJ%2F%33waAI%36Kk%2BzT% 2FAPPCT%2Fvg%30fZ%35%2FwDnhJ%2F%33waAI%36Kk%2BzXH% 2FADwk%2FwC%2BDR%39muP%38AnhJ%2F%33waAI%36Kk%2BzT% 2FAPPCT%2Fvg%30fZp%2FwDnhJ%2F%33waAI%36Kk%2BzT%2F% 38%38JP%2B%2BDR%39mn%2F%35%34Sf%39%38GgCOipPs%30%2 F%2FADwk%2FwC%2BDR%39mn%2F%35%34Sf%38AfBoAjoqT%37N P%2FAM%38JP%2B%2BDR%39mn%2FwCeEn%2FfBoAjoqT%37NP%3 8A%38%38JP%2B%2BDR%39mn%2FAOeEn%2FfBoAjoqT%37NP%2F zwk%2F%37%34NH%32af%2FnhL%2F%33waAI%36Kk%2BzT%2F%3 8APGX%2FAL%34NH%32af%2FnhJ%2FwB%38GgCOipPs%30%2F%3 8Azwk%2F%37%34NH%32af%2FAJ%34Sf%39%38GgCOipPs%30%2 FwDzwk%2F%37%34NH%32af%38A%35%34Sf%39%38GgCOipPs%3 0%2F%2FPCT%2Fvg%30fZp%2F%2BeEn%2FfBoAjoqT%37NP%2Fw A%38JP%38Avg%30fZp%2F%2BeEv%2FAHwaAI%36Kk%2BzT%2Fw DPCX%2Fvg%30fZp%2F%38AnhL%2FAN%38GgCOipPs%30%2FwDz xl%2F%37%34NH%32af%38A%35%34Sf%39%38GgCOipPs%30%2F %2FPCT%2Fvg%30fZp%2F%2BeEn%2FfBoAjoqT%37NP%2FwA%38 Jf%38Avg%30fZp%2F%2BeEn%2FAHwaAI%36Kk%2BzT%2FwDPGX %2Fvg%30fZp%2F%38AnhL%2FAN%38GgCOipPs%30%2FwDzwk%2 F%37%34NH%32af%38A%35%34Sf%39%38GgCOipPs%30%2F%2FP CT%2Fvg%30fZp%2F%2BeEn%2FfBoAjoqT%37NP%2FwA%38JP%3 8Avg%30fZp%2F%2BeEn%2FAHwaAI%36Kk%2BzT%2FwDPCT%2Fv g%30fZ%35%2F%38AnhJ%2F%33waAI%36Kk%2Bzz%2FAPPCT%2F vg%30fZ%35%2FwDnhJ%2F%33waAI%36Kk%2Bzz%2F%38%38JP% 2B%2BDR%39nn%2F%35%34Sf%39%38GgCOipPs%38%2F%2FADwk %2FwC%2BDR%39nn%2F%35%34Sf%38AfBoAjoqT%37PP%2FAM%3 8JP%2B%2BDR%39nn%2FwCeEn%2FfBoAjoqT%37PP%38A%38%38 JP%2B%2BDR%39nn%2FAOeEn%2FfBoAjoqT%37PP%2Fzwk%2F%3 7%34NH%32ef%2FnhJ%2F%33waAI%36Kk%2Bzz%2F%38APCT%2F AL%34NH%32ef%2FnhJ%2FwB%38GgCOipPs%38%2F%38Azwk%2F %37%34NH%32ef%2FAJ%34Sf%39%38GgCOipPs%38%2FwDzwk%2 F%37%34NH%32ef%38A%35%34Sf%39%38GgCOipPs%38%2F%2FP CT%2Fvg%30fZ%35%2F%2BeEn%2FfBoAioqX%37PP%2FwA%38JP %38Avg%30fZp%2F%2BeEn%2FAHwaAIqKl%2BzT%2FwDPCT%2Fv g%30fZp%2F%38AnhJ%2F%33waAIqKl%2BzT%2FAPPCT%2Fvg%3 0fZp%2FwDnhJ%2F%33waAI%36Spfs%30%2F%2FADwk%2FwC%2B DR%39mn%2F%35%34Sf%38AfBoGRUVL%39mn%2FAOeEn%2FfBo% 2BzT%2FwDPCT%2Fvg%30ARUVL%39nn%2F%35%34Sf%39%38Gou nBoEe%30fCz%2FkT%30%2F%36%37yf%30oo%2BFn%2FInp%2Fw Bd%35P%36UVjLco%32Zf%2BQzYf%39dG%2FwDRb%31ynxi%2F% 35Benf%39dm%2F%39Brq%35f%38AkM%32H%2FXRv%2FRb%31yn xi%2FwCQXp%33%2FAF%32b%2FwBBq%33%38QkeW%32sqwzq%37 gle%2BK%36EeINNA%2F%34%38P%38AyBB%2F%38RXM%30VrGpK OxMoKW%35%30%33%2FAAkGm%2F%38APh%2F%35Ag%2F%2BIo%2 F%34SDTf%2BfD%2FAMgQf%2FEVzNFX%37efl%39y%2FyJ%39jD %2Bmzpv%2BEg%30%33%2Fnw%2F%38AIEH%2FAMRR%2FwAJBpv% 2FAD%34f%2BQIP%2FiK%35mij%32%38%2FL%37l%2FkHsYf%30 %32dN%2FwkGm%2FwDPh%2F%35Ag%2F%38AiKP%2BEg%30%33%2 Fnw%2F%38gQf%2FEVzNFHt%35%2BX%33L%2FIPYw%2Fps%36b% 2FAISDTf%38Anw%2F%38gQf%2FABFH%2FCQab%2Fz%34f%2BQI P%2FiK%35mij%32%38%2FL%37l%2FkHsYf%30%32dN%2FwAJBp v%2FAD%34f%2BQIP%2FiKP%2BEg%30%33%2Fnw%2FwDIEH%2Fx FczRR%37efl%39y%2FyD%32MP%36bOm%2F%34SDTf%2BfD%2Fy BB%2F%38RR%2FwkGm%2F%38%2BH%2FAJAg%2FwDiK%35mij%32 %38%2FL%37l%2FkHsYf%30%32dN%2FwkGm%2F%38%2BH%2FkCD %2F%34ij%2FhINN%2F%35%38P%2FACBB%2FwDEVzNFHt%35%2B X%33L%2FACD%32MP%36bOm%2F%34SDTf%2BfD%2FAMgQf%2FEU f%38JBpv%38Az%34f%2BQIP%2FAIiuZoo%39vPy%2B%35f%35B %37GH%39NnTf%38JBpv%2FPh%2FwCQIP%38A%34ij%2FAISDTf %38Anw%2F%38gQf%2FABFczRR%37efl%39y%2FyD%32MP%36bO m%2F%34SDTf%2BfD%2FwAgQf%38AxFH%2FAAkGm%2F%38APh%2 F%35Ag%2F%2BIrmaKPbz%38vuX%2BQexh%2FTZ%30%33%2FCQa b%2FAM%2BH%2FkCD%2FwCIo%2F%34SDTf%2BfD%2FyBB%2F%38 RXM%30Ue%33n%35fcv%38g%39jD%2Bmzpv%38AhINN%2FwCfD% 2FyBB%2F%38AEUf%38JBpv%2FPh%2F%35Ag%2F%2BIrmaKPbz% 38vuX%2BQexh%2FTZ%30%33%2FAAkGm%2F%38APh%2F%35Ag%2 F%2BIo%2F%34SDTf%2BfD%2FAMgQf%2FEVzNFHt%35%2BX%33L %2FIPYw%2Fps%36b%2FhINN%2F%35%38P%2FIEH%2FxFPh%38Q %32izxm%32i%2ByvnHm%2BRF%38oPH%38Kg%31y%31FCrzXb%3 7kJ%30Ynei%38iIz%2FwAJJa%2Fr%2FhWLr%2BoRziO%32bUDc rGdwkij%36Z%37ZOK%35yirniXONrIinh%31CV%2BZss%37rf% 2Fnvcf%38AfA%2F%2BKo%33W%2FwDz%33uP%2B%2BB%2F%38VV aiuY%36Czut%2F%2Be%39x%2FwB%38D%2F%34qjdb%2FAPPe%3 4%2F%37%34H%2FxVVqKALO%36%33%2FwCe%39x%2F%33wP%38A %34qjdb%2F%38APe%34%2F%37%34H%2FAMVVaigCzut%2F%2Be %39x%2FwB%38D%2F%34qjdb%2FAPPe%34%2F%37%34H%2FxVVq KALO%36%33%2FwCe%39x%2F%33wP%38A%34qjdb%2F%38APe%3 4%2F%37%34H%2FAMVVaigCzut%2F%2Be%39x%2FwB%38D%2F%3 4qjdb%2FAPPe%34%2F%37%34H%2FxVVqKALO%36%33%2FwCe%3 9x%2F%33wP%38A%34qjdb%2F%38APe%34%2F%37%34H%2FAMVV aigCzut%2F%2Be%39x%2FwB%38D%2F%34qjdb%2FAPPe%34%2F %37%34H%2FxVVqKYFndb%2FwDPe%34%2F%37%34H%2FxVG%36% 33%2FwCe%39x%2F%33wP%38A%34qq%31FAFndb%2F%38%39%37 j%2FAL%34H%2FwAVRut%2F%2Be%39x%2FwB%38D%2F%34qq%31 FAFndb%2FwDPe%34%2F%37%34H%2FxVG%36%33%2FwCe%39x%2 F%33wP%38A%34qq%31FAFndb%2F%38%39%37j%2FAL%34H%2Fw AVRut%2F%2Be%39x%2FwB%38D%2F%34qq%31FAFndb%2FwDPe% 34%2F%37%34H%2FxVG%36%33%2FwCe%39x%2F%33wP%38A%34q q%31FAFndb%2F%38%39%37j%2FAL%34H%2FwAVRut%2F%2Be%3 9x%2FwB%38D%2F%34qq%31FAFndb%2FwDPe%34%2F%37%34H%2 FxVG%36%33%2FwCe%39x%2F%33wP%38A%34qq%39PEEzDKxOR% 37KaAJd%31v%2Fz%33uP%38Avgf%2FABVG%36%33%2F%35%37% 33H%2FAHwP%2Fiqj%2Bzz%2FAPPGT%2Fvk%30fZ%35%2FwDnjJ %2F%33yaAJd%31v%2FAM%39%37j%2Fvgf%2FFUbrf%2FAJ%37% 33H%2FfA%2FwDiqi%2Bzz%2F%38APGT%2FAL%35NH%32ef%2Fn jJ%2FwB%38mgCXdb%2F%38%39%37j%2FAL%34H%2FwAVRut%2F %2Be%39x%2FwB%38D%2F%34qovs%38%2FwDzxk%2F%37%35NH% 32ef%38A%35%34yf%39%38mgCXdb%2FwDPe%34%2F%37%34H%2 FxVJut%2FwDnvcf%39%38D%2F%34qo%2Fs%38%2F%38Azxk%2F %37%35NH%32ef%2FAJ%34yf%39%38mgCXdb%2F%38APe%34%2F %37%34H%2FAMVRut%2F%2Be%39x%2F%33wP%2FAIqovs%38%2F %2FPGT%2Fvk%30fZ%35%2F%2BeMn%2FfJoAl%33W%2FwDz%33u P%2B%2BB%2F%38VRut%2FwDnvcf%39%38D%2F%34qovs%38%2F %38Azxk%2F%37%35NH%32ef%2FAJ%34yf%39%38mgCXdb%2F%3 8APe%34%2F%37%34H%2FAMVRut%2F%2Be%39x%2F%33wP%2FAI qovs%38%2F%2FPGT%2Fvk%30fZ%35%2F%2BeMn%2FfJoAl%33W %2FwDz%33uP%2B%2BB%2F%38VRut%2FwDnvcf%39%38D%2F%34 qovs%38%2F%38Azxk%2F%37%35NH%32ef%2FAJ%34yf%39%38m gCXdb%2F%38APe%34%2F%37%34H%2FAMVRut%2F%2Be%39x%2F %33wP%2FAIqovs%38%2F%2FPGT%2Fvk%30fZ%35%2F%2BeMn%2 FfJoAl%33W%2FwDz%33uP%2B%2BB%2F%38VRut%2FwDnvcf%39 %38D%2F%34qovs%38%2F%38Azxk%2F%37%35NPjtZWcB%30dF% 39Sv%38vegB%32bf%2Fnvcf%39%38D%2FwCKqVYNwyv%32%30j %31EX%2F%31%36%33dH%38P%33N%32u%36%33jEcY%34aVjgD% 2FgXr%37CtxfCdqB%2B%39vwWPXbCSPzJFWoNk%38yODdYozh% 35LpT%37xgf%31pu%36%33%2F%35%37%33H%2FAHwP%2Fiq%37 e%35%38JyCM%2FYrmOcf%38APM%2FKT%2BB%34Nclf%36a%38M jL%35ZjkU%34KEEc%2BmOxpOLQ%30%37lXdb%2F%38%39%37j% 2FAL%34H%2FwAVRut%2F%2Be%39x%2FwB%38D%2F%34qovs%38 %2FwDzxk%2F%37%35NH%32ef%38A%35%34yf%39%38mpGS%37r f%2Fnvcf%38AfA%2F%2BKo%33W%2FwDz%33uP%2B%2BB%2F%38 VUX%32ef%38A%35%34yf%39%38mj%37PP%2FAM%38ZP%2B%2BT QBLut%2F%38Anvcf%39%38D%2FAOKo%33W%2F%2FAD%33uP%2B %2BB%2FwDFVF%39nn%2F%35%34yf%38AfJo%2Bzz%2F%38%38Z P%2B%2BTQBLut%2F%2Be%39x%2FwB%38D%2F%34qjdb%2FAPPe %34%2F%37%34H%2FxVRfZ%35%2FwDnjJ%2F%33yaPs%38%2F%3 8Azxk%2F%37%35NAEu%36%33%2FwCe%39x%2F%33wP%38A%34q jdb%2F%38APe%34%2F%37%34H%2FAMVUX%32ef%2FnjJ%2FwB% 38mj%37PP%2Fzxk%2F%37%35NAEu%36%33%2F%35%37%33H%2F AHwP%2FiqN%31v%38A%38%39%37j%2Fvgf%2FFVF%39nn%2FAO eMn%2FfJo%2Bzz%2FwDPGT%2Fvk%30AS%37rf%2FAJ%37%33H% 2FfA%2FwDiqN%31v%2FwA%39%37j%2Fvgf%38AxVRfZ%35%2F% 2BeMn%2FAHyaPs%38%2F%2FPGT%2Fvk%30AS%37rf%2Fnvcf%3 8AfA%2F%2BKo%33W%2FwDz%33uP%2B%2BB%2F%38VUX%32ef%3 8A%35%34yf%39%38mj%37PP%2FAM%38ZP%2B%2BTQBLut%2F%3 8Anvcf%39%38D%2FAOKo%33W%2F%2FAD%33uP%2B%2BB%2FwDF VF%39nn%2F%35%34yf%38AfJo%2Bzz%2F%38%38ZP%2B%2BTQB Lut%2F%2Be%39x%2FwB%38D%2F%34qjdb%2FAPPe%34%2F%37% 34H%2FxVRfZ%35%2FwDnjJ%2F%33yaPs%38%2F%38Azxk%2F%3 7%35NAEu%36%33%2FwCe%39x%2F%33wP%38A%34qjdb%2F%38A Pe%34%2F%37%34H%2FAMVVdkdDh%31Kn%33GKSgCzut%2F%38A nvcf%39%38D%2FAOKo%33W%2F%2FAD%33uP%2B%2BB%2FwDFVW ooAs%37rf%2Fnvcf%38AfA%2F%2BKo%33W%2FwDz%33uP%2B%2 BB%2F%38VVaigCzut%2F%38Anvcf%39%38D%2FAOKo%33W%2F% 2FAD%33uP%2B%2BB%2FwDFVWooAs%37rf%2Fnvcf%38AfA%2F% 2BKo%33W%2FwDz%33uP%2B%2BB%2F%38VVaigCzut%2F%38Anv cf%39%38D%2FAOKo%33W%2F%2FAD%33uP%2B%2BB%2FwDFVWoo As%37rf%2Fnvcf%38AfA%2F%2BKo%33W%2FwDz%33uP%2B%2BB %2F%38VVaigCzut%2F%38Anvcf%39%38D%2FAOKo%33W%2F%2F AD%33uP%2B%2BB%2FwDFVWooAs%37rf%2Fnvcf%38AfA%2F%2B Ko%33W%2FwDz%33uP%2B%2BB%2F%38VVaigCzut%2F%38Anvcf %39%38D%2FAOKo%33W%2F%2FAD%33uP%2B%2BB%2FwDFVWooAs %37rf%2Fnvcf%38AfA%2F%2BKo%33W%2FwDz%33uP%2B%2BB%2 F%38VVaigCzut%2F%38Anvcf%39%38D%2FAOKo%33W%2F%2FAD %33uP%2B%2BB%2FwDFVWooAs%37rf%2Fnvcf%38AfA%2F%2BKo %33W%2FwDz%33uP%2B%2BB%2F%38VVaigCzut%2F%38Anvcf%3 9%38D%2FAOKo%33W%2F%2FAD%33uP%2B%2BB%2FwDFVWooAs%3 7rf%2Fnvcf%38AfA%2F%2BKo%33W%2FwDz%33uP%2B%2BB%2F% 38VVaigCzut%2F%38Anvcf%39%38D%2FAOKo%33W%2F%2FAD%3 3uP%2B%2BB%2FwDFVWooAs%37rf%2Fnvcf%38AfA%2F%2BKo%3 3W%2FwDz%33uP%2B%2BB%2F%38VVaigCzut%2F%38Anvcf%39% 38D%2FAOKo%33W%2F%2FAD%33uP%2B%2BB%2FwDFVWooAs%37r f%2Fnvcf%38AfA%2F%2BKo%33W%2FwDz%33uP%2B%2BB%2F%38 VVaigCzut%2F%38Anvcf%39%38D%2FAOKo%33W%2F%2FAD%33u P%2B%2BB%2FwDFVWooAs%37rf%2Fnvcf%38AfA%2F%2BKo%33W %2FwDz%33uP%2B%2BB%2F%38VVaigCzut%2F%38Anvcf%39%38 D%2FAOKo%33W%2F%2FAD%33uP%2B%2BB%2FwDFVWooAs%37rf% 2Fnvcf%38AfA%2F%2BKo%33W%2FwDz%33uP%2B%2BB%2F%38VV aigCzut%2F%38Anvcf%39%38D%2FAOKo%33W%2F%2FAD%33uP% 2B%2BB%2FwDFVWopAWd%31v%2Fz%33uP%38Avgf%2FABVG%36% 33%2F%35%37%33H%2FAHwP%2FiqrUUAWd%31v%2FAM%39%37j% 2Fvgf%2FFUbrf%2FAJ%37%33H%2FfA%2FwDiqrUUCLO%36%33% 2F%35%37%33H%2FfA%2F%38AiqN%31v%2Fz%33uP%38Avgf%2F ABVVaWgZZ%33W%2F%2FPe%34%2FwC%2BB%2F%38AFUbrf%2Fnv cf%38AfA%2F%2BKqtSUAWd%31v%38A%38%39%37j%2Fvgf%2FF Ubrf%38A%35%37%33H%2FfA%2F%2BKqtRQBZ%33W%2F%2FAD%3 3uP%2B%2BB%2FwDFUbrf%2Fnvcf%39%38D%2FwCKqtRTAs%37r f%2Fnvcf%38AfA%2F%2BKqGV%39%38hYZ%35%39etMooEe%30% 2FCz%2FkT%30%2F%36%37yf%30oo%2BFn%2FInp%2F%31%33k% 2FpRWMtyjYm%2F%35DNh%2FwBdG%2F%38ARb%31ynxh%2F%35B enf%39dm%2FwDQa%36ub%2FkM%32H%2FXRv%2FRb%31ynxh%2F %35Benf%39dm%2F%39Bq%33%38QkeU%30UUVQBRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFF ABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFdXaeGLO%39SK%30gnmF%2 BYLe%34kdiDHtlYAqFxkEB%31Oc%38%38%38CgDlKK%36DUNCh mtVu%39DWeSFWnWVZpFJAjwS%34OF%34KkHHUe%39WU%38OWMF vo%37%36hcyQvdXHl%33WXVFhUqrDkjg%34YZz%36%30ActSqp ZgqjJJwK%30dcsVsLxI%34%37WWCN%34w%36GS%34ScSA%35wy ugAI%2Bmar%36age%38XPYE%30AaNnZJEoZhlvWrexf%37o%2F Klop%33EJsX%2B%36PyqwlkXUEIOenHWok%2B%2BM%31%32GiJ bvaXcc%31oJ%35XtmaDD%34Py%34O%31eOGzg%35%35%36Djiq W%31yJN%33SRyp%30%39h%31QDPTjrUDwhGwyj%38q%37i%30% 2BzNp%39%2FNcwR%33J%38uKOJ%31baCzYOF%34OCDhieeMccV yWojE%32CQWHUjoTVSSV%37Ewm%33a%2FUpBFJwFH%35VbSxjI HmPFGT%30DMBmo%37Vd%30%36g%2Btdtp%30%38llpbLaAedfe auS%32BGI%2Fkzj%31yc%2B%34GKUVcc%35W%38jjZtOMYJAVg OuOaqFFBwVH%35V%33EkEP%32GeExpm%33t%33uIZAoDBVI%33 IxHUfNxXJahGI%37llHrTnGwqc%2BZLzKojXaWwPypNq%2F%33 R%2BVSD%2FVH%2FPpTKzNRNq%2F%33R%2BVG%31f%37o%2FKu% 39%38Bafp%31%31o%39xJeWdtPILkqGljViBtXjn%36mrvjDTN Lg%38M%33U%31tYWkUqmPa%38cSqwy%36g%38gehNFwPNdq%2F %33R%2BVAjVmChVyfalp%38fAc%2Bi%34%2FWgBpii%2Fvj%2F AL%39%2F%2FXpPKi%2Fvj%2Fv%33%2FwDXqS%33UNcxKwypdQR %37ZrQbT%30n%31CYKyxwqRwvXoDwKAMvyov%37%34%2F%37%3 9%2F%38A%31%36PKi%2Fvj%2Fv%33%2FAPXrWvbGNpbeG%32CJ kNknvjH%35%30t%33ZW%39tpsmwbpPl%2Bc%39eo%2FKi%34GS IY%32IAYEn%2Fpn%2F%38AXq%37o%2BnpeXpV%2BIY%38tIy%3 8ZGeAPrVSI%37WLf%33VJ%2FIVd%30vUILCKZZiQXxjAznHb%3 9a%31pR%35%35WIm%37I%36WW%34VIwqAJHGMKi%39FHtUuo%3 2V%35psEc%39%30qBHOPlbJBwTg%2Fka%35W%34%31ourCODgg %38sa%37j%34h%33DQ%36FA%30YBJuQOf%39x%36%33neMku%3 5lHVNlS%38sb%33T%34opbpUCyHaNrZIOM%34P%35H%31rN%31 a%30TUrRnAH%32mJcq%33dwP%34T%2FSug%38e%33ZttHtpFUM ftQGM%2F%37D%31x%31tr%38CkGZWjI%35%39QaKadSN%32E%3 3yS%30MVYkKFiQozj%37mf%36%30eVF%2FfH%2Ffv%2FAOvUgI PnYGAeR%2Bf%2FANetLwpDBceJbOK%36iSWFi%2B%35HXIPyMR x%39cVySVm%30dC%31Mnyov%37%34%2F%37%39%2FwD%31%36P Ki%2Fvj%2FAL%39%2F%2FXrsPFHhO%33tLea%2F%30yYJEgLPD Ien%2B%36f%36H%2FwCtWtrvhDTr%31DLpuyznA%2B%36BiNvq O%33%31FK%34HnPlRf%33x%2F%33%37%2F%38Ar%30piQLuG%3 1h%33%2BXBFdFqNja%32%2FgiwmEMQvDdukkq%38lgDIMZ%37j %35RXPR%38%37x%36qf%35UXAZtX%2B%36PypNqf%33R%2BVOr rvA%2Bg%32%39%38%34%31O%36lDLbzFBAV%34YhQQSc%2B%2F THai%34HH%37Uxnav%35Uuxf%37o%2FKu%35vdDhTxJdz%2BaF jeWIgRnayeaSu%35T%32IYE%34%36EGsLxJYxWxtbmMIrT%2BY kqRjC%37%34%33%32swHYHrii%34GHsX%2B%36Pyo%32L%2FdH %35UtTQweYuSxH%30Qn%2BVNJvRCbS%33INi%2FwB%30flRsX% 2B%36Pyq%35%39jH%2FPRv%38Av%30%33%2BFKLHP%2FLU%2Fw Dfp%2F%38ACr%39nPsLnj%33KWxf%37o%2FKjYv%39%30flV%3 4afn%2Flsf%38Avy%2F%2BFO%2Fs%33%2Fpsf%2B%2FMn%2FxN HsqnYXtIdzP%32L%2FdH%35UbF%2Fuj%38q%32rF%39K%30%37 ebzbcXOcKjI%32FGOuCP%35%31HqtxpV%33GstoohuAcNGikBh %36gGrdCajdiVWLdjJ%32L%2FdH%35UbF%2Fuj%38qd%38v%2F AE%30%2F%37%35H%2BNGAQSN%33HqMVjqaEbxI%36lSox%36Yr GvrX%37O%32%35fuH%39K%33Kragoa%30fPYZpAYNFFFIYUUUU AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFF FABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRWn%34Y%34%38U %36Qf%2Bn%32H%2FANDFAGZRXoul%2FEvWr%37U%37e%30mhsY kmcJvjtpJCpPA%2BXzBnnH%2F%31%2BlbPj%2B%35%31GLw%2F d%32V%37c%32c%38c%31v%35oMNu%30RUpPAO%37tkHefTpQB% 35DRRRQB%37T%38LP%2BRPT%2FrvJ%2FSij%34V%2F%38ien%2 FXd%2F%36UVlLcZsTf%38AIZsP%2Bujf%2Bi%33rlPjF%2FwAg vTv%2Buzf%2Bg%31%31c%33%2FIZsP%38Aro%33%2FAKLeuU%2 BMX%2FIL%30%37%2Frs%33%2FoNW%2FiEjyiiiiqAKKKKACiii gAooooAKKKKACiiigAooooAKKKKACiiigBaKSigApaSigAoooo AKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK KKKACiiigAooooAKKKKACiiigAooooAK%36KDxS%39tBE%39ta BL%35I%34YXnMmVZI%32BUBccE%37VBOTwOgzXO%30UAbt%35r lncIsCaWUtk%38%32RY%32uCxEz%2Fx%35AGQuBhcfUmn%33Xi Z%39SsIrTVbZZgs%37TSSQrHC%37%35UADIQ%34PHJ%35z%30% 37Vz%39FAGjq%32pJfC%32igt%2FItrSLyokL%37%32xkklmwM kkk%38AD%32qtZyiG%36Rz%30zg%31XooA%36iisez%31IxKI% 35%31LIOjDqP%38AGr%34%31CzIz%35%32PqhpgWh%31rd%30% 32%37VETc%30oMfzR%2BW%36rh%2BxJIPGM%39PXnNcx%39vs% 2F%2Bfgf%39%38t%2FhThqNqOlyP%38Avlv%38KadiJRudldX% 30bR%37yqrcA%37g%38D%34RmPBLIeASM%38jnmubu%33%33zs wqj%2FaVt%2Fz%38%2FwDjrf%34Un%32%2B%30%2FwCfgf%38A fLf%34U%33LSyFGLTuy%33E%2ByQN%36V%30lhqMZg%38qVWZN %32%39fLcLJG%32MEqTwQfQ%31x%2F%32%2B%30%2F%35%2BB% 2F%33y%33%2BFOXUbVelzj%2FgLf%34URlYcoXOyu%39RiW%33 dIhKBJgSPOymR%31HO%30BflUZ%36%34%36%31zVzL%35sxY%3 9%36pNqVs%33W%35z%2FAMBb%2FCm%2Fb%37P%2FAJ%2BB%2Fw B%38t%2FhRKVxRhYuj%2FVH%2FAD%36VHVf%2B%30LTGPtHHpt b%2FAApPt%39n%2FAM%2FA%2FwC%2BW%2FwqSzptC%38SPo%31 pJbi%30EweQyZ%38%33bjgDHQ%2BlTav%34rfVNNlszZCISFct %35u%37GGB%36bR%36Vyf%32%2Bz%2F%35%2BB%2F%33y%33%2 BFH%32%2Bz%2FwCfgf%38AfLf%34UDLNOj%2B%38V%2FvDH%34 %31U%2B%33%32f%2FPwP%2B%2BW%2Fwo%2B%33WZ%36zj%2Fvl v%38KBFxC%30ciuF%35VgcfSpJLiVrprhMox%39Ko%2F%32jb% 2F%38AP%34%2F%2FAI%2FR%2FaNv%2FwA%2Fj%2Fm%39AzQubq S%35%38ssuGTPI%37%2F%35xSveTSWrQSDdnHzd%2BtZ%33%39 o%32%2F%2FAD%2BP%2Bb%30f%32jb%2FAPP%34%2FwCb%30AWo h%38%34DDg%38GojC%30p%34HzJyR%2FOov%37Rt%2F%2Bfx%2 FzenQ%33%30QkD%32%38%32%35%31O%37ocj%33%35%36%31rR qezncipFyjZFgwHyzx%32ruPHUqXGi%32%36o%34bdMHXBzkbG %35%2FUVh%36eLLUFAhdIpz%31hdsA%2FwC%34TwR%37daunQ% 35EP%2BocH%2FcNd%38oQqNST%32PL%39vOknGSNDxxKlxo%39 sqOrbpw%36%34PUbW%35%2FUVwklsW%34HAAyT%36CuqfRxbxm WfZbxjq%38p%32j%2FAOvXPanfWwJhtSfK%36vIwwX%39%38dl %2FnSjyUIb%33NI%31J%31%36l%30rIrx%35%38pz%36%34H%3 9T%2FSrOl%33j%36bqUN%34sXmGLPyk%34zlSOv%34%31mDULV fu%33RH%30DCl%2FtG%33%2FAOfx%2FwA%33rzG%37u%35%36V jV%31XVb%37VpN%31%31Idg%2B%37GvCr%2BH%39auav%34kv% 39TTyv%2BPeAjmNCfm%2Bp%37%2FSue%2FtG%33%2F%35%2FH% 2FN%36P%37Rt%2FwDn%38f%38AN%36ANabU%35JdDt%39LMICQ SmQPnk%35%33cY%2FwCBGqajajsR%31G%30fjVX%2B%30bf%2F AJ%2FH%2FN%36Q%36han%37%31zn%36hjQBYrR%30bV%37nSbt JI%33kaDdmSHcdrZ%34Jx%30zwOfasX%37faf%38%2FA%2FwC% 2BW%2Fwo%2B%33%32n%2FPwP%2B%2BW%2FwoA%33ptbmk%31ae %39UuiySbkB%2BbZgYU%34zgsB%2BWaqX%39%38%39%37JHldk US%37I%30znA%37knuSeSazft%31p%2Fz%38D%2FAL%35b%2FC j%37daf%38%2FA%2F%37%35b%2FCgCxTld%31GFdgPY%31U%2B %33%32f%2FAD%38D%2Fvlv%38KPt%39n%2Fz%38D%2Fvlv%38A CgC%35%35%30v%2FAD%30f%38%36POl%2F%35%36P%2BdU%2Ft %39n%2FwA%2FA%2F%37%35b%2FCj%37fZ%2F%38%2FA%2F%37% 35b%2FAAoAuedL%2FwA%39H%2F%37%36o%38%36X%2Fnq%2F%2 FfVU%2Ft%39n%2FwA%2FA%2F%37%35b%2FCj%37fZ%2F%38%2F A%2F%37%35b%2FAAoA%30rS%36WCYvNCtwp%36hyc%2FgaLu%3 6WeYPDCsCjoEJz%2BJrN%2B%33%32f%2FPwP%2B%2BW%2Fwo%2 B%33%32f%38Az%38D%2FAL%35b%2FCtPaz%35eW%2Bhn%37GHP z%32%31LnnS%2F%38%39X%2FAO%2BqRndhhnYj%33NVPt%39n% 2FAM%2FA%2FwC%2BW%2Fwo%2B%33%32f%2FPwP%2B%2BW%2Fwr M%30LNUtUlCW%32z%2BJ%2FwCVEup%32yD%39%33ukbtxgVkzz vcSmSQ%38%39h%32FAEdFFFIYUUUUAFFFFABRRRQAUUUUAFFFF ABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRR RQAUUUUAFFFFABV%33RZ%34%37XW%37C%35nbbFDcxyO%32CcK GBJ%34qlRQB%30miT%32%32jPNcW%2Bp%36a%39%34y%37YZnW ciHPUhfK%35Pv%32%39%38%30ye%2Fc%36XexXeuxXxkiKwxgS lgzSxOxyyDAxHnr%31%2BprnqKACiiigD%32n%34V%2F%38AIn p%2F%31%33k%2FpRR%38K%2F%38AkT%30%2F%36%37yf%30orK W%34zYm%2F%35DNh%2F%31%30b%2F%30W%39cp%38Yv%2BQXp% 33%2FXZv%2FQa%36nUma%32uLe%38Cllgk%33OAMnaQVJ%2FAH P%34Vau%37DSdftojdQw%33sKElDnIB%37%39KuWjEj%35%31o r%33%37%2FhDfDf%2FAEB%37b%38j%2FAI%30f%38Ib%34b%2F %36A%39t%2BR%2FwAaOYDwGive%32%38G%2BHe%32j%32%33%3 5H%2FGmf%38If%34f%2F%36A%31v%38Akf%38AGjmHY%38Hor% 33f%2FAIQ%2Fw%2F%38A%39Aa%33%2FI%2F%34%30f%38ACH%2 BH%2FwDoDW%2F%35H%2FGjmCx%34RRXu%2FwDwh%2Fh%2F%2Fo DW%33%35H%2FABo%2F%34Q%2Fw%2FwD%39Aa%33%2FACP%2BNH MFjwiivd%2F%2BEP%38AD%2F%38A%30Brf%38j%2FjR%2Fwh%2 Fh%2F%2FAKA%31v%2BR%2Fxo%35gseEUV%37v%2FAMIfoH%2FQ GtvyP%2BNH%2FCHaB%2F%30Brb%38j%2FjRzBY%38Ior%33tPB vh%33%2BLR%37b%38j%2FjT%2FAPhDfDf%2FAEB%37b%38j%2F AI%30cwWPAaK%39%2B%2FwCEN%38N%2F%39Ae%32%2FI%2F%34 %30f%38ACG%2BG%2FwDoD%32%33%35H%2FGjmEeA%30V%37%39 %2FwAIb%34b%2FAOgPbfkf%38aP%2BEN%38N%2FwDQHtvyP%2B NHMB%34DRXv%33%2FCG%2BG%2F%38AoD%32%33%35H%2FGj%2F hDfDf%2FAEB%37b%38j%2FAI%30cwHgNFe%2Ff%38Ib%34b%2F %36A%39t%2BR%2FwAaP%2BEN%38N%2F%39Ae%32%2FI%2F%34% 30cwHgNFe%2Ff%38Ib%34b%2F%36A%39t%2BR%2Fxo%2FwCEN% 38N%2F%39Ae%32%2FI%2F%34%30cwHgNFe%2BnwZ%34b%37aPb fkf%38ajPgzw%2FwBtItvyP%2BNHMOx%34NRXvH%2FCF%2BH%2 F%2BgRbfkf%38AGo%32%38G%36DnjR%37f%38m%2Fxo%35gseF %30V%37uvgzQO%2BkW%2F%35H%2FGnjwZ%34d%37%36Rbfkf%3 8aOYLHgtFe%39P%34L%38PdtItvyP%2BNR%2F%38IXoH%2FQJt %2FwAj%2FjRzILHhNFe%37%2FwDCF%36B%2F%30Cbf%38j%2Fj R%2Fwhegf%39Am%33%2FAF%2Fxo%35kFjwiivdj%34L%30H%2F AKBFv%2BR%2Fxp%36eC%2FD%33%38WkW%2FwCR%2FwAaOYLHg% 31Fe%2Ff%38ACGeG%2FwDoD%32%33%35H%2FGj%2FhDfDf%38A %30B%37b%38j%2FjRzCPAaK%39%2B%2F%34Q%33w%33%2FANAe %32%2FI%2F%34%30f%38Ib%34b%2FwCgPbfkf%38aOYDwGivfv %2BEN%38N%2F%38AQHtvyP%38AjR%2Fwhvhv%2FoD%32%33%35 H%2FABo%35gPAaK%39%2B%2F%34Q%33w%33%2F%30B%37b%38j %2FjR%2Fwhvhv%2FoD%32%33%35H%2FGjmA%38Bor%33%37%2F AIQ%33w%33%2F%30B%37b%38j%2FjR%2FwAIb%34b%2FAOgPbf kf%38aOYDwGivfv%2BEN%38N%2FwDQHtvyP%2BNH%2FCG%2BG% 2F%38AoD%32%33%35H%2FGjmA%38Bor%33%37%2FhDfDf%2FAE B%37b%38j%2FAI%30f%38Ib%34b%2F%36A%39t%2BR%2FwAaOY DwGivfv%2BEN%38N%2F%39Ae%32%2FI%2F%34%30f%38Ib%34b %2F%36A%39t%2BR%2Fxo%35gPAaK%39%2B%2FwCEN%38N%2F%3 9Ae%32%2FI%2F%34%30w%2BDPDvbSLb%38j%2FjRzDseCUV%37 wfBfh%2F%38A%36BFt%2BR%2FxpR%34L%38P%38AfSLb%38j%2 FjRzBY%38Gor%33s%2BDPDuP%2BQRbfkf%38ajPgvQO%32k%32 %2F%35H%2FGjmCx%34RRXuv%2FCF%36D%2F%30Cbf%38j%2FjT h%34L%30DvpFv%2BR%2Fxo%35kFjwiiveB%34L%38P%2FwDQIt vyP%2BNIfBegdtJt%2FwAj%2FjRzBY%38Ior%33b%2FhC%39B% 2F%36BNv%38Ak%33%2BNPj%38F%2BHh%39%37SLb%38j%2FjRz BY%38Gor%33%37%2FhDPDf%2FQHtvyP%2BNH%2FCG%2BG%2F%2 BgPbfkf%38aOYR%34DRXv%33%2FCG%2BG%2F%2BgPbfkf%38aP %38AhDfDf%2FQHtvyP%2BNHMB%34DRXv%33%2FAAhvhv%38A%3 6A%39t%2BR%2Fxo%2F%34Q%33w%33%2FANAe%32%2FI%2F%34% 30cwHgNFe%2Ff%38Ib%34b%2FwCgPbfkf%38aP%2BEN%38N%2F %38AQHtvyP%38AjRzAeA%30V%37%39%2Fwhvhv%2FoD%32%33% 35H%2FABo%2F%34Q%33w%33%2F%30B%37b%38j%2FjRzAeA%30 V%37%39%2Fwhvhv%2FoD%32%33%35H%2FGj%2FAIQ%33w%33%2 F%30B%37b%38j%2FjRzAeA%30V%37%39%2FwAIb%34b%2FAOgP bfkf%38aP%2BEN%38N%2FwDQHtvyP%2BNHMB%34DRXv%33%2FC G%2BG%2F%38AoD%32%33%35H%2FGj%2FhDfDf%2FAEB%37b%38 j%2FAI%30cwHgNKrFWDKSCOhFe%2B%2F%38ACG%2BG%2FwDoD% 32%33%35H%2FGj%2FhDfDf%38A%30B%37b%38j%2FjRzAeIQai VGJAfcr%33%2FD%2F%39VaUPiCeJNsV%39NGvoHdf%30Feu%2F %38Ib%34b%2F%36A%39t%2BR%2FwAaP%2BEN%38N%2F%39Ae%3 2%2FI%2F%34%31SqNbCcU%39zxq%35%31cytuklklf%31OSfzP %2BFZs%39zJNwflXrtH%39fWvd%2FwDhDfDf%2FQHtvyP%2BNH %2FCG%2BG%2F%2BgPbfkf%38aTnfcaSWx%34DRXv%33%2FAAhv hv%38A%36A%39t%2BR%2Fxo%2F%34Q%33w%33%2FANAe%32%2F I%2F%34%30uYDwGivfv%2BEN%38N%2FwDQHtvyP%2BNH%2FCG% 2BG%2F%38AoD%32%33%35H%2FGjmA%38Bor%33%37%2FhDfDf% 2FAEB%37b%38j%2FAI%30f%38Ib%34b%2F%36A%39t%2BR%2Fw AaOYDwGivfv%2BEN%38N%2F%39Ae%32%2FI%2F%34%30f%38Ib %34b%2F%36A%39t%2BR%2Fxo%35gPAaK%39%2B%2FwCEN%38N% 2F%39Ae%32%2FI%2F%34%30f%38ACG%2BG%2FwDoD%32%33%35 H%2FGjmA%38Bor%33%37%2FhDfDf%38A%30B%37b%38j%2FjR% 2Fwhvhv%2FAKA%39t%2BR%2Fxo%35gPAaK%39%2B%2F%34Q%33 w%33%2FwBAe%32%2FI%2FwCNH%2FCG%2BG%2F%2BgPbfkf%38A GjmA%38Bor%33%37%2FhDfDf%2FQHtvyP%2BNH%2FCG%2BG%2F %2BgPbfkf%38aOYDwGivfv%38AhDfDf%2FQHtvyP%2BNH%2FAA hvhv%38A%36A%39t%2BR%2Fxo%35gPAaK%39%2B%2F%34Q%33w %33%2FANAe%32%2FI%2F%34%30f%38Ib%34b%2FwCgPbfkf%38 aOYDwGivfv%2BEN%38N%2F%38AQHtvyP%38AjR%2Fwhvhv%2Fo D%32%33%35H%2FABo%35gPAaK%39%2B%2F%34Q%33w%33%2F%3 0B%37b%38j%2FjR%2Fwhvhv%2FoD%32%33%35H%2FGjmA%38Bo r%33%37%2FAIQ%33w%33%2F%30B%37b%38j%2FjR%2FwAIb%34 b%2FAOgPbfkf%38aOYDwGivfv%2BEN%38N%2FwDQHtvyP%2BNH %2FCG%2BG%2F%38AoD%32%33%35H%2FGjmA%38Bor%33%37%2F hDfDf%2FAEB%37b%38j%2FAI%30f%38Ib%34b%2F%36A%39t%2 BR%2FwAaOYDwGivfv%2BEN%38N%2F%39Ae%32%2FI%2F%34%30 f%38Ib%34b%2F%36A%39t%2BR%2Fxo%35gPAaK%39%2B%2FwCE N%38N%2F%39Ae%32%2FI%2F%34%30f%38ACG%2BG%2FwDoD%32 %33%35H%2FGjmA%38Bor%33%37%2FhDfDf%38A%30B%37b%38j %2FjR%2Fwhvhv%2FAKA%39t%2BR%2Fxo%35gPAaK%39%2B%2F% 34Q%33w%33%2FwBAe%32%2FI%2FwCNH%2FCG%2BG%2F%2BgPbf kf%38AGjmA%38Bor%33%37%2FhDfDf%2FQHtvyP%2BNH%2FCG% 2BG%2F%2BgPbfkf%38aOYDwGivfv%38AhDfDf%2FQHtvyP%2BN H%2FAAhvhv%38A%36A%39t%2BR%2Fxo%35gPAaK%39%2B%2F%3 4Q%33w%33%2FANAe%32%2FI%2F%34%30f%38Ib%34b%2FwCgPb fkf%38aOYDwGivfv%2BEN%38N%2F%38AQHtvyP%38AjR%2Fwhv hv%2FoD%32%33%35H%2FABo%35gPAaK%39%2B%2F%34Q%33w%3 3%2F%30B%37b%38j%2FjR%2Fwhvhv%2FoD%32%33%35H%2FGjm A%38Bor%33%37%2FAIQ%33w%33%2F%30B%37b%38j%2FjR%2Fw AIb%34b%2FAOgPbfkf%38aOYDwGivfv%2BEN%38N%2FwDQHtvy P%2BNH%2FCG%2BG%2F%38AoD%32%33%35H%2FGjmA%38Bor%33 %37%2FhDfDf%2FAEB%37b%38j%2FAI%30f%38Ib%34b%2F%36A %39t%2BR%2FwAaOYDwGivfv%2BEN%38N%2F%39Ae%32%2FI%2F %34%30f%38Ib%34b%2F%36A%39t%2BR%2Fxo%35gPAaK%39%2B %2FwCEN%38N%2F%39Ae%32%2FI%2F%34%30f%38ACG%2BG%2Fw DoD%32%33%35H%2FGjmA%38Bor%33%37%2FhDfDf%38A%30B%3 7b%38j%2FjR%2Fwhvhv%2FAKA%39t%2BR%2Fxo%35gPAaK%39% 2B%2F%34Q%33w%33%2FwBAe%32%2FI%2FwCNH%2FCG%2BG%2F% 2BgPbfkf%38AGjmA%38Bor%33%37%2FhDfDf%2FQHtvyP%2BNH %2FCG%2BG%2F%2BgPbfkf%38aOYDwGivfv%38AhDfDf%2FQHtv yP%2BNH%2FAAhvhv%38A%36A%39t%2BR%2Fxo%35gPAaK%39%2 B%2F%34Q%33w%33%2FANAe%32%2FI%2F%34%30f%38Ib%34b%2 FwCgPbfkf%38aOYDwGivfv%2BEN%38N%2F%38AQHtvyP%38AjR %2Fwhvhv%2FoD%32%33%35H%2FABo%35gPAaK%39%2B%2F%34Q %33w%33%2F%30B%37b%38j%2FjR%2Fwhvhv%2FoD%32%33%35H %2FGjmA%38Bor%33%37%2FAIQ%33w%33%2F%30B%37b%38j%2F jR%2FwAIb%34b%2FAOgPbfkf%38aOYDwGivfv%2BEN%38N%2Fw DQHtvyP%2BNH%2FCG%2BG%2F%38AoD%32%33%35H%2FGjmA%38 Bor%33%37%2FhDfDf%2FAEB%37b%38j%2FAI%30f%38Ib%34b% 2F%36A%39t%2BR%2FwAaOYDwGivfv%2BEN%38N%2F%39Ae%32% 2FI%2F%34%30f%38Ib%34b%2F%36A%39t%2BR%2Fxo%35gPAaK %39%2B%2FwCEN%38N%2F%39Ae%32%2FI%2F%34%30f%38ACG%2 BG%2FwDoD%32%33%35H%2FGjmAzPhX%2FyJyf%39d%35P%35ii uitoNM%30O%30WCEQWduWJVSwUEnr%31NFQ%39WMmkQOMEVl%3 3Gj%32sjl%32t%34yx%36nYOa%38U%2Ftab%2Fnnb%2F%38AgO n%2BFS%32%31%37d%33UyxQwwMzHtbp%2FhW%31xHsH%39h%32 v%2FAD%37xf%39%38Ck%2FsO%31%2F%35%39%34%2F%38AvgVy um%2BG%32%38tX%31KS%32jJ%2FgFujN%2FLA%2FWtA%2BH%39 KIwr%34PqbeEj%39FH%38%36rlZHMja%2FsO%31%2F%35%39%3 4v%38AvgUf%32Ha%2F%38%2B%38X%2FfArh%39a%30G%37s%34 mns%2Fss%38SjJK%32%36DH%31BHH%31yfwrlG%31OdGKtFACD gg%32%36f%34VL%30KTuex%2F%32Ha%2F%38%2B%38X%2FAHwK P%37Dtf%2BfeL%2FvgV%34%31%2Fasv%2FADzt%2FwDwHT%2FC un%38F%2FZr%39r%36a%2BtLWbyvLVA%38CEDdvJOMYz%38opX HY%37%37%2Bw%37X%2Fn%33i%2FwC%2BBR%2FYdr%2Fz%37xf% 39%38Css%32WmEZXR%37D%2FwDj%2F%38AiagltLBQSuj%32P% 2FgHH%2F%38AE%30uZBZm%33%2FYdr%2FwA%2B%38X%2FfAo%2 FsO%31%2F%35%39%34v%2B%2BBXITtYrnbp%31gP%38At%30j% 2FAPiapSXFsDxY%32A%2F%37dI%2F%2FAImncDvP%37Dtf%2Bf eL%2FvgUf%32Ha%2FwDPvF%2F%33wK%38%30vJ%34leTZa%32q %37rffgQIMMC%2FI%34%34%36Csy%34%31JlddsNsMrniBPU%2 B%31Fwsevf%32Ha%2F%38%2B%38X%2FfAo%2FsO%31%2FwCfeP %38A%37%34FeOf%32rJ%2Fzyt%2F%38Avwn%2BFH%39qyf%38A PK%33%2FAO%2FCf%34UXCx%37H%2FYdr%2FwA%2B%38f%38A%3 3wKP%37Dtf%2BfeP%2FvgV%34%35%2Fasn%2FPK%33%2F%37%3 8J%2FhV%2BH%37bJALiWOztoG%2B%37JPEihvoMZP%34A%30pT UdwSb%32PVP%37Dtf%2BfeP%2FvgUf%32Ha%2F%38APvH%2FAN %38CvJZbqVImliNlOiHDGOBflz%30yCoNVv%37Vk%2FwCeVv%3 8A%39%2BE%2FwoUk%39gasex%2F%32Ha%2F%38%2B%38f%2FAH wKP%37Dtf%2BfeP%2FvgVi%2BEbDTLnwxZ%33V%31ptjNNP%35 jO%38lujE%34kYDqOOAK%31zpmjf%39AfTf%2FASP%2FCncB%2 F%39h%32v%2FAD%37x%2FwDfAo%2FsO%31%2F%35%39%34%2F% 2B%2BBULabo%34%2FwCYPpv%2FAICR%2FwCFQvY%36SOmk%36b %2F%34CR%2F%2FABNFwLn%39h%32v%2FAD%37x%2FwDfAo%2Fs O%31%2F%35%39%34%2F%2B%2BBWW%39rpY%36aVp%33%2FgJH% 2F%38AE%31EYNNB%2F%35Benf%2BAkf%2FxNFwNn%2Bw%37X%2 Fn%33j%2FwC%2BBR%2FYdr%2Fz%37x%2F%39%38CvJ%39Vvfsm sX%31tDDbiKG%35kRB%35KHADEAciqn%39qyf%38%38rf%2FAL %38J%2FhRcLHsf%39h%32v%2FPvF%2FwB%38Cj%2Bw%37X%2Fn %33i%2F%37%34FebaRp%2Bp%36pCLjy%37O%32tScCaaFAG%39 doC%35b%38Bj%33roU%38JxmwF%34%2BrwLGX%32f%38gxTz%2 BdS%36kVuCXNLlW%35%31H%39h%32v%2FPvF%2FwB%38Cj%2Bw %37X%2Fn%33j%2F%37%34FczfeEI%37DYJtXhJcbgF%30xDx%3 6%2Ferm%2FEsH%39hXUECTwXDSwiUhrJIygJOARz%36U%31NN% 32FdXself%32Ha%2F%38%2B%38f%2FAHwKP%37Dtf%2BfeL%2F vgV%34%35%2Fasn%2FADyt%2FwDvwn%2BFH%39qyf%38%38rf% 2Fvwn%2BFO%34%37Hsf%39h%32v%2FPvH%2F%33wKP%37Dtf%3 8An%33j%2FAO%2BBXjo%31SUkAQ%32%35J%36AW%36f%34VpQ% 32%2BqTKG%2By%32%30YP%39%2BFB%2BmKTkluVCnKfwq%35%3 6h%2FYdr%2Fz%37xf%39%38Cj%2Bw%37X%2FAJ%39%34v%2B%2 BBXlV%30NRtFLy%32kBQdWWCMj%2BVUf%37Vk%2F%35%35W%2F %2FfhP%38KFJPYJQlF%32krHsf%39h%32v%2FPvH%2FwB%38Cj %2Bw%37X%2Fn%33j%2F%37%34FeOf%32rJ%2FwA%38rf%38A%3 7%38J%2FhR%2Fasn%2FPK%33%2F%37%38J%2FhTuTY%39j%2Fs O%31%2F%35%39%34%2F%2B%2BBR%2FYdr%2FAM%2B%38f%2FfA rxz%2B%31ZP%2BeVv%2FAN%2BE%2FwAKP%37Vk%2FwCeVv%38A %39%2BE%2FwouFj%32P%2Bw%37X%2FAJ%39%34%2FwDvgUf%32 Ha%2F%38%2B%38f%2FAHwK%38giv%37mY%34htYpD%36LbIf%3 6VOW%31RV%33tpbBfU%32Qx%2F%36DTV%33%30Fp%33PWP%37D tf%2BfeP%2FvgUf%32Ha%2FwDPvH%2F%33wK%38d%2FtWT%2Fn lb%2FwDfhP%38ACtLw%35cJqGvWtvdQW%37wkuzL%35KANtRiA cDpkClcdj%31D%2Bw%37X%2Fn%33j%2F%37%34FH%39h%32v%3 8Az%37x%2F%39%38CssWukY%2F%35BOnf%2BAsf%2BFaMPhqxn gSZNO%30sBxkA%32if%34U%31qIf%2FYdr%2FwA%2B%38f%38A %33wKP%37Dtf%2BfeP%2FvgVDJ%34Wt%2F%34bHSx%2F%32%36 R%2F%34Vkahp%39rpsyrNp%32nsrfxLaR%34H%31%34p%32fYV %30bv%39h%32v%2FAD%37x%2FwDfAo%2FsO%31%2F%35%39%34 %2F%2B%2BBWKi%36VtBOm%36f%2F%34Cx%2F%34VXvjp%30Swy RWNmhEu%30%37YEGQVbrx%36gVHN%35F%32Oi%2FsO%31%2F%3 5%39%34%2F%2B%2BBR%2FYdr%2FwA%2B%38f%38A%33wKoaRp% 32kPo%39lJNpljJLJbxu%37vboxZmUEnJHvWjBomkTsRHpGm%3 8DPNqn%2FwATTTuIb%2FYdr%2Fz%37x%2F%38AfAo%2FsO%31% 2F%35%39%34%2F%2B%2BBUzeHdOHTSNL%2F%38Bk%2F%2BJqnd %36Np%39tCZW%30jTiB%32W%32jyf%2FAB%32qs%33shXS%33J v%37Dtf%2BfeP%2FvgUf%32Ha%2F%38APvH%2FAN%38CsgW%32 lyJvj%30%32wx%2F%31%36x%2F%34VF%39k%30%39mCHTrEBjj i%32QH%38%38VnzrsVym%35%2FYdr%2Fz%37x%2F%38AfAo%2F sO%31%2F%35%39%34v%2B%2BBXM%2BGLWyvJZ%33vLK%31m%38 uGHaHgUgFt%2BTjHX%35RXRDStHJAGkadk%2F%39Osf%2BFNST BxsSf%32Ha%2FwDPvF%2F%33wKP%37Dtf%2BfeL%2FAL%34FTH w%31pw%2F%35hOln%2Ft%32T%2FwCJpjeH%39PHTR%39M%2F%3 8B%30%2F%2BJqtexOgz%2Bw%37X%2Fn%33j%2F%37%34FH%39h %32v%38Az%37xf%39%38Cs%31%37bSRO%30J%30qxVx%36%32s eD%39OKa%31np%33bTbD%2FwFj%2FwqZS%35XZopRuro%31P%3 7Dtf%38An%33i%2F%37%34FH%39h%32v%2FPvF%2FwB%38CuZv LS%30%2B%33wwpaWyRzPbqyrCo%2B%39LtOOOMiuk%2FsnRh%2 FwAwjTv%2FAAFT%2FChSTBxsO%2FsO%31%2F%35%39%34%2F%3 8AvgUf%32Ha%2F%38%2B%38f%2FfAqWLQNKmj%33ppGmYzjm%3 2T%2F%34mkbw%37p%34%36aRpf%2FgOn%2FwATVEkf%39h%32v %2FPvH%2FwB%38Cj%2Bw%37X%2Fn%33j%2F%37%34FVb%33T%3 9LstvnaRp%2BG%37rbRnH%31%34qFrPSgMrpun%34%2F%36%39 Y%2F%38ACk%33y%37oa%31%32Zof%32Ha%2F%38%2B%38f%2Ff Ao%2FsO%31%2FwCfeP%38A%37%34Fczq%36WEVlI%38NjZo%36 FSCtug%2FiAPQehqx%34fs%39Nm%30iKe%34%30%36zllleQlp LdGPEjKByOBgChSuFje%2FsO%31%2F%35%39%34%2F%38AvgUf %32Ha%2F%38%2B%38f%2FfAplto%2Bk%33EmxdJ%30%30HGebW P%2FAAqeTw%31YY%2BXS%39LH%2FAG%37J%2FwDE%30xEf%39h %32v%2FPvH%2FwB%38Cj%2Bw%37X%2Fn%33j%2F%37%34FQTeH rSFGc%36bphA%37C%31j%2FwDiar%32lppM%36ZGl%32II%34I NrHkfpQ%37pXsCabsX%2FwCw%37X%2Fn%33j%2F%37%34FH%39 h%32v%2FAD%37x%2FwDfAqD%2BzNL%2FAOgZYf%38AgMn%2BFU NP%30%36wl%31dIJrK%32eJEuGCNCpBKyKq%35%34%35wCannQ %37Gt%2FYdr%2Fz%37x%2F%38AfAo%2FsO%31%2F%35%39%34% 2F%2B%2BBU%33%39i%36L%2F%30B%39O%2F%38BU%2Fwp%33%2 FCPaWVDDR%39L%35Gf%2BPdP%2FiapO%34tiv%2FYdr%2Fz%37 x%2F%38AfAo%2FsO%31%2F%35%39%34%2F%2B%2BBUreH%39OH TRtL%2F%38B%30%2F%2BJqg%39lo%38dz%39nk%30mwV%2Bx%2 BzR%34P%36UWdr%32C%36LX%39h%32v%2FPvH%2F%33wKP%37D tf%38An%33j%2FAO%2BBUB%30vS%2B%32l%32H%2FgLH%2FhWZ rdnZ%32%31vLJb%32VrGfssx%2BWBRyAuD%30%36%38mo%35%3 0VY%32v%37Dtf%2BfeP%2FAL%34FH%39h%32v%2FPvH%2F%33w KlGh%36Kg%32DSLA%37eMtbISfqSKcmg%36TJnZo%2Bmcetsn% 2FAMTVJ%33EQf%32Ha%2FwDPvH%2F%33wKP%37Dtf%2BfeP%2F AL%34FTN%34e%30%34dNH%30v%2FAMB%30%2FwDiap%33ml%36 ZZx%37%35dG%30%38r%2FsW%30ZP%38AKqs%33shXSJv%37Dtf %38An%33j%2FAO%2BBR%2FYdr%2Fz%37x%2F%38AfAqqun%36S %36Bk%30zTyD%2FwBOsf%38AhUF%37p%32nCyuGTTrJWWJmVlt %30BBAJHQVHMh%32NH%2Bw%37X%2Fn%33j%2FwC%2BBR%2FYdr %2Fz%37x%2F%39%38CqGjaZptw%31%39Jc%36dZystwEXfAhCq I%30OAMccsa%30RomkM%34VdI%30%37JOObVP%38KadwsN%2Fs O%31%2F%35%39%34%2F%2B%2BBR%2FYdr%2FAM%2B%38f%2FfA qVvDWnjppWl%2F%2BAyf%2FE%31Xl%38O%32aqzDTNMAAz%2Fx %37J%2F%38TTs%2Bwrof%2FYdr%2FwA%2B%38f%38A%33wKP%3 7Dtf%2BfeP%2FvgVhNDp%33mPH%2FZdirKcEG%31j%2FAMKaYL Dtp%31h%2F%34Cx%2F%34VLlZ%32aKSuro%33%2F%37Dtf%38A n%33j%2FAO%2BBR%2FYdr%2Fz%37x%2F%38AfArlLe%32tJPEM Nq%39pbG%33abcU%38lcEeSXx%30%36ZHSunGl%36Nj%2FAJBG nf%38AgLH%2FAIUKSFYk%2FsO%31%2FwCfeP%38A%37%34FH%3 9h%32v%2FPvH%2FwB%38CpE%38O%36ZJGHXSdMwfW%31T%2FAO Jpj%2BHLHtpWl%2F%38AgMn%2FAMTVWFcT%2Bw%37X%2Fn%33j %2FwC%2BBR%2FYdr%2Fz%37x%2F%39%38Cs%32%2BsNOspVjl% 30rTxu%2FiW%31jIH%36VA%31rp%33bTbD%2FwABY%2F%38ACh %36boFrsbP%38AYdr%2FAM%2B%38f%2FfAo%2FsO%31%2F%35% 39%34%2F%38AvgVzV%2FBaRpC%38VlaI%33m%37Ttt%30GQVY% 38%38ewrW%30fTNKbR%37KSXTLGSSS%33jd%33e%33RizMoJ%3 5I%39%36XMOxf%2FALDtf%2BfeP%2FvgUf%32Ha%2F%38APvH% 2FAN%38Clh%30PSZ%32Ij%30nTRgZ%35tU%2F%2BJpz%2BG%37 AdNK%30v%2FwABk%2F%38AiaYhn%39h%32v%2FPvH%2F%33wKP %37Dtf%38An%33j%2FAO%2BBVa%38%30SytoWlOlaaQOy%32%3 0eT%2F%34%37WYsOmuu%35NNsP%2FAWP%2FCh%33WrQKz%30Nz %2Bw%37X%2Fn%33j%2FwC%2BBR%2FYdr%2Fz%37x%2F%39%38C sJbWwdgh%30%36xwxxxbID%2BeKr%2BGbWyu%35Z%32vLK%31m %38uCHaHgUgFt%2BTjHX%35RU%38yHY%36X%2Bw%37X%2FAJ%3 9%34%2FwDvgUf%32Ha%2F%38%2B%38f%2FAHwKjGlaOSANI%30 %37J%2FwCnWP%38Awqy%33hrTx%30%30rS%2FwDwGT%2F%34mq WoiL%2Bw%37X%2Fn%33j%2F%37%34FH%39h%32v%2FAD%37x%2 FwDfApH%38OWQ%36aXpf%2FgMn%2FwATWRJbaYk%37QtpdgrD% 2FAKdY%38H%36cUWdr%32C%36vY%32P%37Dtf%2BfeP%2FAL%3 4FH%39h%32v%2FPvH%2F%33wKxTa%36f%32%30%32w%2F%38BY %2F%38Kz%37u%32tf%37RghW%30t%30jmeBWVYVH%33pdpxxxk VPMh%32Oq%2FsO%31%2F%35%39%34%2F%2B%2BBR%2FYdr%2Fw A%2B%38f%38A%33wKYNK%30b%2FoEad%2F%34Cp%2FhU%38Xh% 2FS%35o%39%36aTpmM%34%35tU%2F%2BJpp%33FsR%2F%32Ha% 2F%38%2B%38f%2FfAo%2FsO%31%2FwCfeP%38A%37%34FPfw%3 5YdtK%30v%2FwGT%2F%34ms%37UNN%30%36xwZdJ%30%2FB%37 raxnH%31%34qrPsF%30Xv%37Dtf%2BfeP%2FAL%34FH%39h%32 v%2FPvH%2F%33wKwbiDT%31TKadYf%2BAsf%2BFc%37rEsCWU% 37xWdojxhWUpboP%34gOw%39%36jmQ%37HoH%39h%32v%38Az% 37x%2F%39%38Cj%2Bw%37X%2Fn%33j%2FwC%2BBXLeGYNOl%30 G%32uLnT%37OaaYuzNJbox%34dgAMjgYFblnpWl%33k%2FlR%3 6XpqnBOTaR%2F%34VQi%37%2FYdr%2FwA%2B%38f%38A%33wKP %37Dtf%2BfeP%2FvgU%31%2FC%31p%32sNL%2F%38AARP%2FAI mqlz%34ZhiiZ%31stM%34%37fZI%2F%38A%34mnZiui%37%2FY dr%2FwA%2B%38f%38A%33wKP%37Dtf%2BfeP%2FvgVxM%30tsj Mp%30%36xRlOCDaR%35H%2FjtVmubcH%2Fjxsf%38AwFj%2FAP iaT%30Hud%2F%38A%32Ha%2F%38%2B%38f%2FfAo%2FsO%31%2 FwCfeP%38A%37%34FefeHBbXPiO%38gubW%33kgtkkZEaFSM%2 BYqjPHPBPWut%2By%36Rj%2FAJBOnf%38AgLH%2FAIUrjNT%2B w%37X%2FAJ%39%34%2FwDvgUf%32Ha%2F%38%2B%38f%2FAHwK P%2BEWsioZdP%30vkZ%2F%34%39E%2F%2BJqCTwtb%2FAMNlpY %2F%37dI%2F%38Kqwrk%2F%38AYdr%2FAM%2B%38f%2FfAo%2F sO%31%2F%35%39%34%2F%38AvgVy%32rWsGnXHlSadp%35B%36 OLSPB%39vu%31mPcWw%36WNh%2F%34CR%2F%2FABNJ%36boFZ% 37Hef%32Ha%2FwDPvH%2F%33wKP%37Dtf%2BfeP%2FAL%34FeW %36%33dJHFC%38NvbRl%39%36tsgQZxtx%32%36%38mu%2B%2B w%36PCTENKsCEO%33LWyEnHqSKVx%32NT%2Bw%37X%2FAJ%39% 34%2FwDvgUf%32Ha%2F%38%2B%38f%2FAHwKr%32WhadfRM%38 em%36YoU%34%35tI%2FwDCpH%38LWv%38ADYaWP%2B%33SP%2F %34mnYRJ%2FYdr%2FwA%2B%38f%38A%33wKP%37Dtf%2BfeP%2 FvgVj%36rocVhbmYafp%30mP%34VtI%38%2FyrnXuLXqthYf%3 8AgJH%2FAPE%30NNboE%30zuv%37Dtf%2BfeP%2FvgUf%32Ha% 2F%38APvH%2FAN%38CvPLieB%37acCzs%31IidgVto%31IIUkc ge%31Y%30OouLOefyoC%34kjQZgTABDk%38Yx%32H%35Urjseu f%32Ha%2FwDPvH%2F%33wKP%37Dtf%2BfeP%2FAL%34FeSNqF% 34tslw%31tAIXYqr%2FZo%38Ej%38P%38AOD%36U%32%36%31B %31W%32kWKAGSHLfuExkO%34%36Y%39AKLhY%39d%2FsO%31%2 FwCfeP%38A%37%34FH%39h%32v%2FPvH%2FwB%38CvG%2F%37V l%2F%35%35%32%2F%2FgOn%2BFH%39qy%2F%38%38%37f%2FAM B%30%2FwAKLhY%39k%2FsO%31%2F%35%39%34%2F%38AvgUf%3 2Ha%2F%38%2B%38f%2FfArxv%38AtWX%2FAJ%35%32%2FwD%34 Dp%2FhR%2Fasv%2FPO%33%2F%38AAdP%38KLhY%39k%2FsO%31 %2F%35%39%34%2F%2B%2BBR%2FYdr%2FAM%2B%38f%2FfArxv% 2B%31Zf%2Bedv%2FAOA%36f%34Uf%32rL%2FAM%38%37f%2FwH T%2FCi%34WPZP%37Dtf%2BfeP%2FvgUf%32Ha%2F%38APvH%2F AN%38CvG%2F%37Vl%2F%35%35%32%2F%2FAIDp%2FhR%2Fasv% 2FADzt%2FwDwHT%2FCi%34WPZP%37Dtf%38An%33j%2FAO%2BB R%2FYdr%2Fz%37x%2F%38AfArxv%2B%31Zf%2Bedv%2F%34Dp% 2FhR%2Fasv%2FPO%33%2FwDAdP%38ACi%34WPZP%37Dtf%2Bfe P%2FAL%34FH%39h%32v%2FPvH%2F%33wK%38b%2FALVl%2FwCe dv%38A%2BA%36f%34Uf%32rL%2Fzzt%2F%2FAAHT%2FCi%34WP ZP%37Dtf%2BfeP%2FvgUf%32Ha%2FwDPvH%2F%33wK%38b%2Ft WX%2Fnnb%2FwDgOn%2BFH%39qy%2FwDPO%33%2F%38B%30%2Fw ouFj%32T%2Bw%37X%2Fn%33j%2F%37%34FH%39h%32v%2FAD%3 7x%2FwDfArxv%2B%31Zf%2Bedv%2FwCA%36f%34Uf%32rL%2Fw A%38%37f%38A%38B%30%2FwouFj%32T%2Bw%37X%2FAJ%39%34 %2FwDvgUf%32Ha%2F%38%2B%38f%2FAHwK%38b%2FtWX%2Fnnb %2F%2BA%36f%34Uf%32rL%2Fzzt%2F%38AwHT%2FAAouFj%32T %2Bw%37X%2Fn%33j%2FwC%2BBR%2FYdr%2Fz%37x%2F%39%38C vGv%37Vl%2FwCedv%38A%2BA%36f%34Uf%32rL%2Fzzt%2F%2F AAHT%2FCi%34WPZf%37Dtf%2BfeP%2FvgUf%32Ha%2FwDPvH%2 F%33wK%38a%2FtWX%2Fnnb%2FwDgOn%2BFH%39qy%2FwDPO%33 %2F%38B%30%2FwouFj%32X%2Bw%37X%2Fn%33j%2F%37%34FH% 39h%32v%2FAD%37x%2FwDfArxr%2B%31Zf%2Bedv%2FwCA%36f %34Uv%39qy%2FwDPO%33%2F%38B%30%2FwouFj%32T%2Bw%37X %2Fn%33j%2F%37%34FH%39h%32v%2FAD%37x%2FwDfArxptUlK kbIBkdRAgP%35%34rpb%32%2BghuJY%30t%37YBXIH%37lOx%2 BlFwsehpotuhysKA%2ByiivJdR%31BJbNjGkSssqjKIqnGG%39 PpRRcLGDXa%2BGYY%39OsxdMo%38%2BT%37pPYev%39Pzriq%3 6n%37ZJhYVVQqdD%37ZzWtGPMzKtPlR%30QkuL%32XCSMqjrjv VqO%31uI%35hEshLFC%32G%35wB%2F%2BuquiW%35lwr%33UsZ %2F%36Z%34H%39K%31%37X%37TDc%33U%37xS%33sQIhWWMAMN vJ%2BXvyeo%39K%35a%39HEU%36jqcyt%32%2FI%32jiqVSiqc I%36%39%37feZst%35c%32j%2FADADHXmuQ%38U%32cSTLeW%3 6hY%35eoHY%2Bn%2BexFdP%34ink%38tSLeWIMesgAJx%37ZzX LandPPpzo%36gCPpjuSR%2FhW%31HnqUueRyxlyz%35TArrfA% 37furxM%34%38yeBfz%38yuSrpPCMmyQj%2B%39eWw%2FwDQ%3 6h%37HUj%31pLF%30uIrhYh%35sS%37Ub%30GD%32%33Y%37mi S%33vZbxJZXkeAAh%34cgB%38%35%37%35%34%37flWk%38kcf Mjquc%34%33HFQSXcCkq%30%38YYcEFxxXDytLRMuMoxbtZXMW awspLqNPsVrFE%32S%37nBKdeCCcnoPzrO%38RaNp%30elTy%3 2rWweNd%34MaYJx%32%36%31%30r%33%38H%2FAD%38x%2FwDf YrL%38RzCTw%35fkMGBhbBBzSdV%33Wlvv%2FwCGHFJ%33%31u eWXbZK%2B%39q%33%38%35Kyrjkp%2Fu%2F%31NaM%33Pk%2B% 39o%2F%38AOSs%32b%2BD%2FAHf%36mvQMyOremWTX%39%37Hb qGO%34%38hRkn%36VUr%30LwlYRaNpkmpXYxMy%35%39%31HoP fp%2BftWdWqqava%37%36Luw%35XI%30DNpXhOwjWSCBbiQcKq gt%39Sx%35NZ%39%2Fc%36Z%34itNzwR%35UbVkX%37%36fj%2 FSsHVLq%32ub%34%33erJI%37TDMYXoq%39h%31psN%2Fp%30M Liyt%35wCeSFJ%35%2FOuuhh%2BR%33rNOX%35eS%2FrU%34a% 31aUo%32pJmPOrWL%33FtgEvhS%33%2ByDn%2BYFVas%33%30w nnMmGHb%35hVaspxSk%2BU%36%34NuK%35tz%31TwnP%35fhTS %31z%31jkP%38A%35GkrV%38wOzs%37MFVezEd%2FauX%30OUp %34d%30sD%2FAJ%34v%2FwCjpK%32befdCxB%36OAamU%2FZxc %2ByLUPaSUO%37LrlgocwOqN%39%30tI%33P%36%30%2B%33W% 32nO%31kZW%39PNbn%39a%33tNjjudFgSZA%36MnINYF%33Fb% 32%32qJHaTeYucnnO%30%35%36Z%37%31zwrVoyi%35O%36lb% 35XN%35%30KUoyUVZxv%2BBmXoEMMbhmO%37AOTn%2BFT%2FU% 31S%2B%30e%39WdZOLKD%2FeH%2FAKLSsfea%37aqtI%34qLbj qcpr%2F%2FACMOp%2F%38AX%33L%2FAOhmrXhXSo%39U%31U%2 FaQTa%32yGaYA%34%33AEALn%33JA%2Bmaq%36%2FwD%38jDqf %2FX%33L%2FwChmuj%38B%34%2Bwatj%37%32%36D%38svn%39 cVhN%32i%32XN%32i%32dMS%38%30igLljhURBgAdlUdh%37Vv WensbOG%30uJIVZbnzXj%33gttx%30x%36%35rO%30PH%39oHB AkMTiLP%39%2FHH%39aoqsvnhQH%2B%30bun%38W%37%2F%38A XXErWu%39bnLSqOlJTW%35uTGGG%37bUNUUmVz%2B%34tRgkKO hNeYfEC%32uIvFM%31xcMzLeIs%38RYYIQjAUj%32xj%38K%39 N%31LUpLW%2BZYI%37fzgqiSXZlt%32ORmuF%2BI%31xJdQaTL O%32%36YibJwB%38uVx%2FWt%36b%39%39q%35%31RnT%2BCK% 31%36s%34iiiiugs%36jw%39YJBCl%33KoMkoymf%34R%2FwDX rp%34LGeeLzh%35ccROA%38rhQT%37etZkAVrKIJ%30%32Db%2 BXFbmpf%36%36IL%2FAKryU%38r%30%32%37R%2FXNGHwqxFW% 30noFDNnDD%32iveT%2FAA%37%2FAKEL%36ReDHyIyt%30ZXBB %2FEVx%33irQZdMZLsRhIZm%32kKeFbr%2Bv%38ASvRtB%33m% 32ud%32fK%33Lt%2FwB%37nP%36Vl%2FEEJ%2FwjD%37sZ%38% 31Nv%31z%2FhmuHEc%32GxnsU%37rT%38Tt%2BsvFYfmkjyyii iu%34%34i%39pOl%33Gq%33PlQYVV%35dz%30UV%36BpHgeCON ZBZtct%2FfmwAfoDx%2FOmfDWyhltotwB%33s%30jj%31wcAU% 2FVde%38Rak%39%31dab%35%30GnWrlS%30QAwB%33J%36n%31 x%32rovGklpdvU%35%37Oo%33rZI%33Ikk%30hdj%36fCB%2FD vTIH%30xxVDXNVsY%37Tzby%2BEMhGBHDHtI%39h%33%2FLNWP B%32tXGtG%37%30vUXFysabkm%32%34JGcc%2FmCO%39cH%34% 36gSLUYXGN%35VkbHfaeD%2BtaqteDlbVGbpWko%33%30Zzt%3 0%30L%33UjW%34cRFiVDnLY%39%36%30vCrbPEELekcx%2F%38 hPWRWhoLbNVVvSKb%2FwBFNXEdZ%32wvvevQNJk%33aRaN%36x Kf%30rxw%33m%31ck%38V%36xoEm%2FwAP%36e%33%39%36%33 Q%2FpVx%31FI%30%32esfWLC%33uYpZ%35AxdUP%38XB%2FCtF mqpfNmzmH%2Bwf%35VvTunoYys%39zzW%30uXMK%35PapbyRms %31%35%2F%35bL%2F%36C%39U%37L%2FUr%39KnuT%2FoX%2Fb Zf%2FQXrke%35%30I%36WwufL%30%32xXPS%31h%2F%39FrW%2 FwCHrjzZZ%2BeiiuJScrb%32y%35%36W%38Q%2F%38hrXReDZ% 2FMnux%36Kv%38zVR%33E%39jrmeql%33DHdQmKXO%30%38%38 HFSM%39RM%31bxTTujGTvozk%37iJLXVZreLPlqgIyc%39c%30 %31H%2FfoP%38AaH%38%36fqZ%2F%34ns%2F%2FXNf%36%31Vj b%2FSox%2Ftj%2Bdc%31b%2BIzppfCM%38NP%35a%33R%39Y%3 7f%2FwBqVvwz%35mQZ%2FiFcxoz%37beY%2BqwfykrSt%37j%2 FSYRnq%34%2FnUJ%36opo%37tmqNmprNUTNXXGJzNnO%2BIbOC %31gFzDuEhkUctnGTVZX%34FX%2FABSc%36Yv%2FAF%31T%2Bd ZQbgVjim%32%31c%31oJKLsE%33zajan%2Fppbf%2Bj%36%36N uV%34rmJHxqFr%2FAL%30B%2FwDIxrWhvc%38E%31ki%32dDpx ItMH%2B%38amZ%36p%32Em%36%32JH%39%34%2FwBKmZq%36YK %36MJOzKuo%32UF%36MzbsqONrYrhlvGUSJnhZGUfQGu%39duD XmpVmnnA%2FwCerfzNVVvyJMVO%31%32%30LezGSyuBnsv%38A %36Gta%32hS%37NFs%31%39pP%2FAEa%39Zr%32rGznyOoT%2F ANGLV%2FTIytjbL%2FdD%2FwDo%31%36%35%37mx%31WjPm%35 X%2FdNbTPXO%36O%2BL%31V%2F%32TW%32z%31pBXRnJ%32EuF WaJo%33ztYYODiuauII%37HWI%34oNwR%34yxyc%38%35FdEzV zusNjW%37c%2F%39Mm%2FmK%31ldU%32iI%32cky%38HqnYHGt FvSO%35%2F%38ARyU%35ZOKgtGxqUh%39FuB%2F%35GWuNG%35 veb%37%31oo%2F%37lP%39%30VgebgVsRv%2B%35T%2FAHR%2F KtaepE%39CVmrA%31%36ygS%32mvV%33iZfmHzcZrZZqy%39eb Oj%33P%38Au%31%30wutjJ%32b%31IYZCYUJ%37is%2FXTuspB %36%32%30%34%2FRatQH%39wn%30qpq%2FNuR%36wT%2FwAkrg Ok%36KSXErj%33NWbCTIk%2FCsmaT%39%38%2FP%38Rq%37pcm %35JfqK%30hqyZbGiz%31SvrWG%38jCTbsDptOKmZqjZq%36op p%33RhKzVmc%35Zfuri%36gUnZHJhQT%32xU%31%30%32bO%34 %2F%36%34v%38A%2BgmqsJxqN%39%2F%31%31%2FoKluT%2FAK Jcf%39cZP%2FQTXLV%2BNm%38fhRY%30ZtiXnvdf%2B%30o%36 %31IJM%33Ef%2B%38KxbBtsdx%37%33BP%2FkOOrtrL%2FpcQ% 2F%32hUxeqG%39joGaoZCGUq%33IIwaRmqJmrqUTBs%35XxDaQ %32Mls%30G%37MjkMWbPY%31S%33%31p%2BK%2Fm%2Bxf%39dD %2FKsoqayxDbldmtGyjoMtTjxLC%33oxP%2Fkua%36Bbj%33rn %34ht%31tW%39M%2FwDpOau%2BdtGSayKO%31snzYxH%31Wns% 39U%39OfOm%32%35%39UFSs%31dMUYtmfq%39hb%33EUs%38gb eqZGG%34%34%39q%35WzmLWsZY%38kV%32F%36%32bOYf%37B% 2FlXD%32R%2F%30SP%36UV%32%2BVXHSSu%37E%39%36%32%36 CP%2FrsP%2FQXrW%30%32bZpVivpaw%2FwDoC%31jXPMCf%39d l%2F%39AerdvJts%37UelvEP%2FHBXManUaNLull%35%36LWoz %31zvh%32bfPOPRR%2FOttnreCujKTsyO%37hjuoTFLnaeeDiu Mvo%30tNYlt%34s%2BWEUjJz%36%31%32TNXG%36%30f%38Aio Zf%2BuS%2F%31rSd%2FZtEwtzXFhf%39%38n%2B%38Ki%38NPs W%36PrHbj%2F%30ZS%32%35zcRf%37%34%2FnVbRm%32QTH%31 SD%2BUlchudNDPmZBn%2BIV%30rNXEQT%2F%36REPVx%2FOuxZ q%31p%36kS%30HM%31ct%34jsoLW%32FzDuEhkUctnGTXRM%31 YXio%35%30sf%38AXVP%35%31%30K%36TMtG%30ZgbgVXn%35% 31SyP%2FTS%33%2F%38ARxqVTwKjk%2F%35CNp%37NAf%38AyM a%34joN%38Te%39bOmPmzz%2FtGuXEuB%31rf%30eTdp%34P%2 B%30auGrJlsaDPWfqNlBejM%32%37Kjja%32KtM%31Qu%33Brq heLujCVnozgjIfLkXsrsB%39Aa%35%2FVX%33Wd%32P%39hf%3 8A%30Na%32JDgTf%39dX%2Fmawb%34%35tr%33%2FrmP%38A%3 0Ytcj%2BJnR%30NrRbnytA%30%35c%2F%38ALNz%2FAORXrqPC l%31%35urFc%2F%38smP%36iuAtpyml%32C%35%36RN%2F%36N eul%38B%33XmeIXjzki%33Y%2FqKpbiZ%36Sz%31XuFWaJo%33 ztYYODilZ%36jZq%33ijJs%38%38%38b%32%30NhfWywAgOrEk nJPSub%38%33%33rpPiO%33%2Bm%32R%2F%32G%2FmK%34%37e ais%32%35XZcElHQ%31%39Ak%38rxBq%37%2FwDTOT%2F%30cl bwvveuXs%33%38rV%39YP%2By%34%2FwDIyVK%39%37sXJNZFH tiP%2B%35T%2FdFNZqijf%39yn%2B%36P%35UjNW%36iZtmB%3 4qsLf%2Byry%37w%33mhCwy%33GfpXmgm%34%36%31%36j%34o bPh%32%2FwD%2BuLfyryIOcUVm%32lcKaSvYdq%37brS%33P%2 B%33J%2FJK%37m%37vdt%37cDPSRh%2BtcFfnNhbn%2FppJ%2F JK%33b%2B%36I%31G%36%35%2F%35av%2FM%31gaHpHhCfzbCd s%39JcfoK%32%32euR%2BHtx%35%32kXTDtcY%2F%38AHRXTs% 31axVyJOxDfWsN%35GEm%33YHTacV%35Tru%32%33%31y%37hj %34RHAA%2FAV%36wzV%35D%34pbHiW%2B%2F%33x%2FIVc%37% 38liYW%35rlcSbo%35h%2F%30xk%2F%39ANZUf%38AyC%37j%2 FrtF%2FwCgyVdgbJlH%2FTGX%2FwBAaqUf%2FILuP%2Bu%30X% 2FoMlc%35sSyaxfS%32xt%33mUwlduzykAx%2BXFRXn%2FAB%3 7%32X%2FXA%2FwDox%36rVZvP%2BPey%2F%36%34H%2FANGPQI TT%37Nr%2B%38W%32SWOIlWYvJnaoVSxJwCegPQVch%30N%37u WWPT%37%36%30u%32igaZvL%38xeAQMDei%35Y%35%34FM%38P XMVprEc%30%38scSCOVd%38iF%31BaNlGVAORkjsa%30DqC%32 r%33Mw%31Gwlme%32%32wtZWphCuJUYZHloM%38E%35%35%36f SgZiT%32skFvbTOVK%33KF%30APIAYrz%2BKmoK%31%39evLO% 38j%30%38%32XGyA%2BbHtwI%33MjMQPbnj%32xWRQAUVd%30m xTUdQjt%35bu%33tIjzJNO%34VUXvjJGT%36D%2BQyRZ%38R%3 6Xa%36XqJTT%39QgvbR%38mKSOVWZR%2FdYDoR%36%39D%2BYD EZNXoNG%31S%35jSS%31%30%2B%35uEkTzAYYzJ%38u%35lydu ccow%35%39Ko%31%36H%34V%38T%32HhvTbUX%30dxIbmyURiF Qfu%33FxnOSP%37wpDPP%35YpIJWimjeOReGR%31II%2BoNMr% 31TUdMttQkvNXvNLtLqGceZG%37zvGUYKqCMsp%35OVztx%33P NeVkEEg%39RSjJS%32NKlGdP%34goqzZWF%31f%2FaPskXmfZo GuJfmA%32xrjJ%35PPUcDmvTfDfhi%31%30LWrb%35vPvINUa% 33%2B%30YK%37ozZmTG%33JHU%39etUZHlNS%32%31vNd%33Md vbRNLNI%32%31EUZJNRV%36%37%38MNLsY%39Mh%31FbdftckH zSkkn%2FAFsq%38Z%36cKo%34%39KAPIsZ%36dqK%36PQre%33 %38uD%35gVuLhbaRyDiSJ%34%38yjB%2F%35%35kKc%2BpB%39 K%35ykAVd%30SGK%34%31zT%34J%31DRS%33MaOD%33UsAapUU DOy%31%36JNRjN%39OdXdUe%35iW%33JDiJkAwyjACxjgMO%32 Opqtc%36jqlppFrZSXk%35%31OWVJII%34%32Ie%31j%32%37Q ox%39%30sCPlHYDPWsGbVNRnk%38yfULqR%39hj%33PMxOw%39 VyT%30%39qkl%31vV%35lVZtVvpFRgyh%37hyFI%36Ec%39RQI %30vFl%33LPr%38NrLcPcGxjS%33MjuWLsPvkk%2F%37RP%35V %31F%39fxnxTFYz%33%35vJ%2F%37XjeFMOfsqjgjLAdcjhcjj NebtI%37yGR%33ZnY%37ixOST%36%35qQ%33Vybr%37UbiU%33 G%37f%35u%38%37%39%33rnrmmB%33%2Bm%32%38EXiiHxAqr% 35d%33MkUSY%36TsxWT%38gGP%2FAAJa%34G%39%2F%34%2Frj %2Frq%33%38%36RLu%35RkZLiVTG%35kQhyNrnHzD%30PA%35% 39qiYlmLMSSTkk%39%36QBVzVLhpL%2B%34AJx%35rfjzVOpLg %37riVvVyf%31oAQH%2FR%33X%31dT%2BhopB%2FqW%2FwB%34 f%31ooAZW%2Fp%30ouIo%32%36umFYfSsCpbe%34ktpRJEcEfr WlOfJK%35nVp%38%38bHdWbTx%34ZGGfSumsNRgt%39PjiL%34 cAlt%33HzE%35P%36muG%30%33xHbDaLlSp%37%2F%35%2FwD% 31VrSeI%39L%38vhzn%36r%2FjW%2BLo%30cZTUXO%31jzKNTE %34Sq%2BWnzXHeILn%37ZNuU%35VRgfWuP%31WUKgt%31PJO%3 5%2F%36Vd%31PX%31lBW%31TGf%34jXPsxdizEkk%35JNZPkp% 30%31Rp%37I%37qUak%35urVVm%2BglbnhpttzEPW%39t%2F%3 5tWHV%37TpjGr%37JFjlEiSIWIHK%35%37njuKxaujqPdZ%37% 2F%37NctlAwCZ%2F%39C%2FwqtJd%33DsWhjDIScYVfy%35Nec %32%33izUVRhePb%33bseHedFIHPHB%39zUM%33iTWZJnaC%2F hgjYkiNZ%34%38Ln%36mqu%34U%31yWv%35mHI%35TfNseiSX% 30%30ZAljZeM%39QMjj%30J%39RVHX%35ll%30HUWQ%35zDz%3 9dorjLbxBqiOzXVxa%33QK%37QJLmMbeQex%39hUV%2Fq%2BpX nmItzawwSKFaJbqMg%38Y%37tmpqp%31KSTtzX%2FUKcOSo%32 tjLkHFv%2FANecn%38%35azZukX%2B%35%2FU%31ozSRJtHmxt %35Nq%30bbWByzF%38Aev%33hWdPj%35FBBKrg%34Oe%35oNiX TER%39RgEv%33N%34J%2FDmuq%38Vao%39utlax%2F%36tl%38 x%2F%38Aaz%30%2Fma%34%31WKMGU%34I%36VoDWZzAsU%30Nv OEGEM%30e%34r%39KxnGXtI%31I%2FZLVnFxfU%36uwGg%36tZ Il%2B%32FThW%35UqfTNVtTn%30jS%34DBp%37gr%31wDkk%2B %35rkbi%35muSDM%2BQv%33VAwq%2FQDgVFXorGO%2FNyq%35% 35%2F%31Jbczt%32HzStNK%30jdSc%30yiiuVtt%33Z%32pJKy O%36%30nP%2FCO%36bjr%35Tj%2FAMiyVt%36QIxbyxyMBuPQn FYmgXVm%32gWUb%33trHJErq%36SzKhB%38xm%36MR%32Iq%2F %35%31l%2F%30ELD%2FwAC%34%2F%38A%34qhW%32YnfdM%33X n%31E%32aWcMieQgxlGClh%37%38%2FwAqbaWvksGdgWz%32PF YontB%30%31KwH%2Fb%35H%2FwDFVIt%35AOmq%32P%38A%34G x%2F%2FFVnToUoT%35%39XbbyNqmIqzhyaJPe%33Ul%31YhrSB QcncOB%2FuLWX%35Rq%34ZbMnJ%31HTz%2FwBvkX%2FxVJ%35l l%2F%30EdO%2F%38DIv%2FAIqtpy%35nc%35%36ceVWOF%38Q% 2F%38jHqn%2FX%35L%2F%36Gas%2BFdVj%30rVc%33JItLhDDO QMlQSCGA%39iAfpmqetzR%33GuahPCweKW%35kdGHcFiQapVD% 31LavoesOjwup%33DkB%34%35EOQw%37Mp%37irn%39sX%32%3 3HmJuxjzNg%33fnXmmj%2BJtQ%30qIW%36GO%34tM%35%38idd yg%2Bqnqv%34Gtj%2FAITi%33%32f%38gRfM%2FwCvltv%35Yz %2BtczoyT%39%31nM%36Mk%2FdZ%30%38aNMzEuFVQXklc%34V F%37sx%39K%38%2F%38U%36smrauZLfP%32WBBDBkYJUdz%37k kn%38aNY%38S%36hq%30X%32eQx%32%39rnP%32eBdqk%2Bp%3 7sfqax%36%30p%30%2BQ%31p%30%2BT%31CiiitTU%36fw%2Fq Cy%32y%32sjASxjC%35%2FiH%2F%31q%36ODUpreDyiIpYl%35 CSpuC%2FTuK%38%31BKkEEgjoRWlba%37f%32%37Id%36ybCCB Iufz%39anVO%38Tz%36mDlz%38%31N%32ueu%36f%35%2F%32N HuiodhkIqhVjHoAP%31rz%37x%37rseoXMdhaOHgtzudweGfpx %39P%36%31k%36l%34n%31jUozFcXZWJuqRgKD%39ccmseuOjh Ze%30daq%37s%39VzSgoR%32Ciiiu%34yOr%38E%2BIo%39InW KZiPnLKWPy%34IwQfSu%37m%30%37TtRhnFhrUmnwXbb%35%37 c%34%32lj%31xnGM%39%38HFeM%31Yhvru%33XbDcyovornH%3 5VqpxaSktjLkabcep%36%2FDLonhLTZhZziWdx%38%38zEEe%3 3PTHsK%38p%31%33UjqeoNKM%2BWo%32pnrj%31P%31qlPcT%3 3BzPNJIR%30%33sTio%36Uprl%35Y%37DUHfmkFW%39Lbbe%35 %2F%36ZS%2F%2Bi%32qpU%39k%36pcguwUFWXJ%37ZUj%2BtZm hOzljXsvh%31v%2BKb%30%33%2Fr%32T%2BVeN%2BUf%2BekH% 2Ff%35P%38a%31YNc%31mCBIYdTjSONQqqJY%2BAKuDSepMldH rjNVa%36bNtL%2FuN%2FKvMBr%2Bun%2FmLR%2F%39%2FwCL%2 FGpE%31rW%33%34k%31aEg%39QbiL%2FABrZVYoz%39mxtof%3 3C%2FSpbg%2F%36Cf%2Bu%36f%2BgSVHBGFQD%37Ra%38f%39P Mf%2FwAVTrlkW%31EQlid%32lV%38RuHwArDkj%2FeFcrNiSRz %35cIB%2F%35Yx%2F%2BgCul%38Ctia%39%2F%33V%2Fma%35U NG%38cZ%38%32IERqpDSBSCFA%36E%2B%31T%32%39%35Pabvs l%39FCXxuKypz%2BZqouzuxNXR%36ezVEzV%35%31%2Fa%2BqH %2FmMJ%2F%33%2Bj%2Fxpy%36pqZPOsx%2F%39%2FwCL%2FGt% 31ViZezZt%36q%32Nel%39%34l%2FrVWFv%38ATYf%2Bui%2Fz qtFL%35kpmub%2B%32kkIxua%34jzj%38%36es%30EVwkr%33V ttRgx%32zKx%34PYA%35rlqPmldHRTVlYq%36a%2BLR%2FdYf% 35PV%32%30b%2FS%34T%2F%30%30X%2BdZdi%36xwGOR%31QlI %38bzgcBs%38n%36%31bSVFYMtzACDkHzl%34%2FWs%2Bpp%30 PRXbk%31EzVxAv%37tj%2FyGVH%2FbaP%38AxqQXdweutp%2F% 33%2Fj%2FxrsVaCOZ%30ZM%32vEpzpf%2FbVP%35%31lqeBUEk pmXZcatDKmQdrTx%2F%34%31IJYB%2FwAvdp%2F%34EJ%2FjWF eam%30%30a%30o%38iswkAN%2Fb%2BwhP%2FAJGarsUY%33VQa RHu%30kjdXSNYgzIcjiRmOCOuARV%2BKW%33B%35urf%2FAL%2 Br%2FjWY%32b%2BnNi%31x%2FtH%2BQqZmrn%33kif%38A%31e qxwj%30WZP%38AGonPpry%2F%39%2Fk%2FxrphVikkzCUG%32d AzVx%2BnWoklmYj%2FAJav%2FM%31ZLy%35%2F%35DyY%2FwCu %38f%38AjU%31u%31nbx%34F%39akkkk%2BenJP%34%30qtRSj ZDhBxeot%35CiWL%34H%38UY%2F%38iJTbOL%2FR%34%38di%2 FwD%36ManXE%30EsBjiuIZXd%34%38LHIHPDqSePYGlhmhiiCS TRxurPkO%34U%38sSOvsawNS%2FpibL%35W%39iP%30rXZq%35 yS%37gKYS%2BhjbsyzLkfrVNrl%2B%32tr%2FwB%2Fk%2Fxral OMVqZzi%32%39Dqmaue%31psavan%2Fpk%33%38%36otdTDpri f%39%2FwCP%2FGmCRXlWSfUreZlGAWnj%34%2FWtJ%31YuLSJj TadzSR%36ban%2FTZj%37zj%2FyMKgS%34tx%31vLX%2Fv%2Bh %2FrSW%38yLO%38rsEjkaYqzcD%35pAw%2FMVymxp%35zW%33G %2F%37iP%38A%33R%2FKucF%31bf%38AP%31b%2FAPf%31f%38 ajabJ%2BXWVQdgJk%34%2FWtKUlHcicb%37HSs%31ZutNnSbn% 2FcrK%38w%2F%39B%31f%2B%2F%36f%34%30%31ykilJdajdDw VaePB%2FWt%2FbQM%2FZu%35egP%37lPpVbU%2FuKPWCf%2FAN kqVbm%30VQovbTA%2F%36eE%2FxqteyJcYW%33kSXbDKCY%32D AFtmBkcZ%2BU%31xm%35oTtmV%2F%39%34%31e%30lsRy%2FUf %31rJe%36tmct%39pgGTnmQA%2FkTUUlwhH%37rUoofXbMnP%3 6%31cGlK%37Jkrqx%30%37NUTNXMec%33%2FQcX%2Fv%38n%2B NL%35zf%39B%31P%2B%2FwDH%2FjXSq%30DH%32TJI%2FwDkJX %33%2FAF%31%2FoKluT%2FoV%31%2F%31wk%2F%38AQDUEL%32 sRZjf%32zu%35yzGdMn%39aW%35uLdrO%34RLmB%33eF%30VUl ViSVIAwD%37%31zTd%35Nm%36%30Via%32OEm%2F%36%37H%2F ANASrVocXcR%2F%32hVCOaOMyrLKkZMm%34b%32C%35G%31R%3 3%2BhpxuYMfLeQKexEy%38frUrdDZ%30zNUbNXMGZj%2FwAxxR %2F%32%32T%2FGk%38%31v%2Bg%36v%2Ff%38Aj%2FxrrVaBh% 37NlzxB%38%37%32Q%2F%36an%2BVVWhpmYXdGn%31aGbYcqHn j%34%2FWrP%32i%30%2F%35%2FLT%2FwIT%2FGsKslOV%30aQX KrMzymNVY%2BjY%2F%38l%36V%31JqUtGbx%35wwMJlwH%37Y% 38oLn%36ZpXkt%2F%2Bfm%33%2FwC%2Fq%2F%34%31mWdLprY% 30y%33H%2BxUrNXIPdSDAi%31ZI%31HRRMmB%2BtM%2B%31XH% 2FQcX%2Fv%2FAB%2F%34%31%31RqxSMXTbZ%31V%30%32baX%2 Fcb%2BVcXZf%38ekf%30qwbmcjDa%33GQeoM%38fP%36%30yP% 37PHGEW%37tcD%2FAKeE%2FwAairUU%30rFQi%34%37iXH%2FH vH%2F%31%33X%2F%30B%36erf%36PAB%2Fzxj%2F%38AQBUVxJ E%30cccc%30UjecHIjcPgBWHOPdhRHLF%35MQM%30SlY%31Uhn CkEADofpWJZv%38Ahk%34muP%38AdH%38%36%33WauGW%36MQP %32e%2FiiJ%36lZk%2FwAaPtt%31%2FwBBpf%38Av%39H%2FAI %31vTnGKszOcG%32dozVyesc%36%2FJ%2F%31yT%2BtQfbLr%2 FoNp%2FwB%2F%34%2F%38AGmhkaUyzahbSyEY%33NcR%35x%2B dOpVjKNkKEGncntf%38Aj%36h%2F%33%31%2FnVPTDi%30b%33 SH%2BT%31bintopkka%36tsIwY%37ZlY%38egBzVOxKwwBJmWM mOPG%38%34GQGyMn%36iuc%31Ltvn%37TEf%39sfzrtXbk%31w wmiBBFzACOh%38%35f%38AGnG%38uCf%2BQ%30o%2F%37bR%31 rTko%37kTi%33sdkzVjeJTnS%2FwDtqn%38%36xvtVx%2F%30H E%2F%37%2FAMf%2BNI%38hmXbcavDKmQdrTx%2F%34%31q%36% 30bNEKm%30%37k%36%39BUcn%2FH%2Fb%2BwhP%38A%35FaniW %33x%2FwAfdp%2F%34EJ%2FjUUskbXayRurxxrEGZDkcSMxwR% 31wCK%35DYtHmug%30dsaeB%2FtGuc%38%36%33%2FAOfmD%2F v%36v%2BNI%31yQMQ%36pHEvosyf%34%31dNqLuyZK%36%30Ou ZqiZq%35X%37RL%2F%30HF%2F%37%2FR%2F%34%30faJf%2Bg% 34n%2Ff%2BP%2FGulVoIy%39mzLlX%35Jj%2F%30%31f%38Ama %35%36%38H%2Bj%33%2F%38A%31yX%2FANGJXVzi%33WEhby%3 1Ykkk%2FaI%2BSfxrltTMcNvd%35mhYyoEURyq%35J%33qexOO Aa%35r%33k%32alMyEWNmAekR%2F%38ARj%31%30nw%35OPEb% 2FAPXu%2FwDNa%35eMrLbQhZIwUUqQzhf%34ie%2F%31qzY%33 N%33p%38%35msrqKKQrtLCVOn%34n%32qluDPa%32aomavKf%2 BEg%31%30%2F%38AMVT%2FAL%2FRUo%31%37Xj%2FzFo%2F%2F AAIi%2FwAa%36FUiZezZrfEc%2FwClWJ%2F%32H%2FmK%34zNa V%39cahqRQ%33t%37bzFM%37S%31zEMZ%2FH%32qp%39kb%2BK e%31A%37n%37TGcfkaxqSUpXRpFWViRm%32apq%2F%31cf%38A kVaqsxY%35NPM%38cupXzq%34Czs%35QtwOXDD%39BSeUf%2Be kH%2Ff%35P%38agZ%37nG%2F%37iP%2FAHR%2FKms%31eTDxDr mMDVUA%2FwCusVKNf%31%30%2F%38xaP%2Fv%38Axf%34%31%3 0KpFGTg%32eg%2BJWz%34ev%2F%38Ari%31eRZran%31fWrmB% 34ZtTheN%31KsrXEPIP%34%31mfZH%2F%35%37Wv%38A%34FR% 2F%2FFVFSalaxcI%32Irz%2FAJBlt%2F%31%32l%2F%38AQY%3 6sajIWv%37jngyt%2FOq%2BoFUtIIPMjd%31eR%32%32MGABCg cjj%2BE%31LOFmnklSWEq%37FhmRQeT%36E%31kWehfDVsaJdf %39fH%2FALKK%36%31mrxuw%31PUtPhaKyvooUZtxAlj%35P%3 4n%32q%31%2FwkGun%2FAJi%30f%2Ff%36L%2FGtozilqZyi%3 2z%31VmryXxX%2FyM%31%39%2Fvj%2BQqb%2B%33te%2F%36C% 30X%2FAIERf%34%31nXK%33N%33cPcXFzavK%2F%33mNzEM%39 vWnOopRshRg%30yK%30%35kl%2FwCuE%33%2Fotqqx%2FwDILu P%2Bu%30X%2FAKDJV%31EFsssks%30GPJkUBJkckshUcAnuaqW yebYTxK%38SuZY%32AeRUyAHz%31I%39RWBoPk%30e%2FitjcS QqIQu%37f%35qEY%39ueaiu%2F%38Aj%33sv%2BuB%2F%39GPU rQ%33jWyW%37XEBhRiyp%39qjwCf%38AgX%2Bcn%31qK%2BGxL WPejMkJDbHDAHe%35%36jjoRQMq%30UUUAFFFFABRRRQAVaubw zwWMYTYbSExZzndmR%33z%37ffx%2BFVaKAOs%2F%34Te%35%2 Fsv%37F%39lh%38vy%39nl%34%2BTPXf%36%37s%38%39a%35M kkknqaKKUYqOxpUrTqfEacOv%36rBYrZRXW%32%33SCW%33VPL Q%34jlILjOM%38kDnqO%32Ks%2FwDCX%36%2F%39p%2B%30f%3 2h%2B%39%38%2F%37Ru%38mP%2FWeX%35efu%2FwBzjHTv%31% 35rDopmQVp%2BH%39cvdA%31Fbyyf%32kjP%33ZF%39D%2Fj%3 2rMooGS%32%39zNbeZ%35D%37DJGY%32I%36%37T%31A%39Mjj %36EioqKKACul%30hrW%2B%30R%39NtxFFqCrNKXkso%35BMoU HaJDlkIAbGB%2BNc%31V%36DVry%33s%33tIGijjdSjlYUEjKT kqZANxB%39M%2B%31AG%37osdraXuh%32NxY%32txLeSrLN%35 %38e%34orEBB%31%2FugnByPmHHAqz%34X%30MXL%36hdvYG%3 5jYzQQqIt%36oQjNu%36YBztA%39zx%30rnF%31u%39j%31Z%3 9TiMKXDEbSYVcJjGNoYHGMAA%39aiGqXi%33%37%33%30bxxzy KysUiRRhhtPygYGQT%32oEXreP%2Bz%39JhkNnFPeXlxiKOWLe QiHHA%39%33OPfaR%33ren%2By%32trJc%2FYbCbUrf%37Pb%3 3KrBGYg%37MxYbMbd%32Aqkgdc%34rl%30%31i%38ivra%38t% 32jiltY%31jhwgYKAMdGzyck%2FU%31JH%34h%31KGYywtbRFg Ayx%32cKq%32DkEqFwSCMg%34yO%31AG%31qtnZQ%36frVrb%3 2luhtdRjjjmCkvtYvwSSeBgDAx%30%35%35pPFVjbRW%39zHpz wiHTpkgki%2ByIj%35KnDeb%39%35%38kHIOPpgZrDGuagLGaz MkLQzktLvt%34%32Z%32OfmLldxPJwc%35GeKbe%36%31qN%2F bLb%33dxvjBDH%35FUuQMAsQMsQOMnJoAz%36kl%2F%31r%2F% 37xqOrc%31uzTyMjwlSxIPnIOM%2FWgZCB%2Fosh%39HUfo%31 FTPGYrJ%31doyzSIQFkVuAGz%30PuKKBH%2F%32Q%3D%3D%22% 20%2F%3E%0D%0A
id=%39%34%2D%33%39%2DE%35%2DDE%2D%33%36%2D%33%35
========================================
Bot ID: BEHEERDE-CIZJFN_7BF1A2E1FAEB3000
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1043
Локальное время:16.05.2016 13:26:29
GMT: +2:00
Время сессии: 02:23:13
Время отчета: 21.05.2016 20:11:09
Страна: ??
IPv4: 213.93.163.210
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://aegqdrswgitmmitfx.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://aegqdrswgitmmitfx.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:26:32
Время сессии: 02:23:17
Время отчета: 21.05.2016 20:11:10
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://lyljcvsnamunscmkt.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://lyljcvsnamunscmkt.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:26:32
Время сессии: 02:23:17
Время отчета: 21.05.2016 20:11:11
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://ilewetdbqxwwotpdz.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://ilewetdbqxwwotpdz.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:26:36
Время сессии: 02:23:21
Время отчета: 21.05.2016 20:11:11
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://bctqdlevgzzpcpayr.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://bctqdlevgzzpcpayr.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:26:36
Время сессии: 02:23:21
Время отчета: 21.05.2016 20:11:13
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://rhajltlqwfnziyenl.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://rhajltlqwfnziyenl.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:26:40
Время сессии: 02:23:24
Время отчета: 21.05.2016 20:11:14
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://mqupsqypbscfbyjyk.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://mqupsqypbscfbyjyk.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:26:41
Время сессии: 02:23:25
Время отчета: 21.05.2016 20:11:15
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://muarqmwufxcosuqpz.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://muarqmwufxcosuqpz.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:26:44
Время сессии: 02:23:29
Время отчета: 21.05.2016 20:11:17
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://klciaqpacbobjfffc.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://klciaqpacbobjfffc.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:26:49
Время сессии: 02:23:33
Время отчета: 21.05.2016 20:11:18
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://bawnzaqqtlflnzoze.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://bawnzaqqtlflnzoze.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:26:53
Время сессии: 02:23:37
Время отчета: 21.05.2016 20:11:20
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://whcfgczxkuutlaodv.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://whcfgczxkuutlaodv.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:27:47
Время сессии: 02:24:32
Время отчета: 21.05.2016 20:11:24
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://5.196.189.34/HcmDuo
Тип: HTTP запрос
Размер (байты): 174
----------------------------------------
http://5.196.189.34/HcmDuo
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:29
Время сессии: 02:25:14
Время отчета: 21.05.2016 20:11:26
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://www.overnitesensation.nl/zh/
Тип: HTTP запрос
Размер (байты): 183
----------------------------------------
http://www.overnitesensation.nl/zh/
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:30
Время сессии: 02:25:14
Время отчета: 21.05.2016 20:11:26
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://vhkintjtksyxgjrzz.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://vhkintjtksyxgjrzz.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:30
Время сессии: 02:25:15
Время отчета: 21.05.2016 20:11:28
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://btpnxlsfdqbhzazyx.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://btpnxlsfdqbhzazyx.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:31
Время сессии: 02:25:15
Время отчета: 21.05.2016 20:11:29
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://ukfmknjdenthvktgc.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://ukfmknjdenthvktgc.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:31
Время сессии: 02:25:16
Время отчета: 21.05.2016 20:11:31
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://qupxsrhrmuoinqrit.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://qupxsrhrmuoinqrit.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:32
Время сессии: 02:25:16
Время отчета: 21.05.2016 20:11:32
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://gjsbydmrpfzsmnfiu.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://gjsbydmrpfzsmnfiu.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:32
Время сессии: 02:25:17
Время отчета: 21.05.2016 20:11:34
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://indpstqbetcpcqprx.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://indpstqbetcpcqprx.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:33
Время сессии: 02:25:17
Время отчета: 21.05.2016 20:11:36
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://gwrdmhyjfcpcutmhp.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://gwrdmhyjfcpcutmhp.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:33
Время сессии: 02:25:17
Время отчета: 21.05.2016 20:11:37
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://bwnzcyypcbmnlpfsw.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://bwnzcyypcbmnlpfsw.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:33
Время сессии: 02:25:18
Время отчета: 21.05.2016 20:11:39
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://twkpwfuecvvzcincq.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://twkpwfuecvvzcincq.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:34
Время сессии: 02:25:18
Время отчета: 21.05.2016 20:11:41
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://pdwfuxgnahmgsxhit.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://pdwfuxgnahmgsxhit.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:35
Время сессии: 02:25:19
Время отчета: 21.05.2016 20:11:42
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://jyalcixnmcjafecuk.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://jyalcixnmcjafecuk.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:35
Время сессии: 02:25:20
Время отчета: 21.05.2016 20:11:48
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://ocwhgfvoqhkdsrtjl.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://ocwhgfvoqhkdsrtjl.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:39
Время сессии: 02:25:23
Время отчета: 21.05.2016 20:11:50
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://wfzuuinpiteusxqfo.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://wfzuuinpiteusxqfo.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:42
Время сессии: 02:25:26
Время отчета: 21.05.2016 20:11:51
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://xgsqljmoypxbflety.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://xgsqljmoypxbflety.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:45
Время сессии: 02:25:29
Время отчета: 21.05.2016 20:11:53
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://bnxnjmsuhiyvoclzi.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://bnxnjmsuhiyvoclzi.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:48
Время сессии: 02:25:32
Время отчета: 21.05.2016 20:11:56
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://zzwzzqmihkfdevymi.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://zzwzzqmihkfdevymi.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:51
Время сессии: 02:25:36
Время отчета: 21.05.2016 20:11:57
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://hxiwupwmcezqutijl.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://hxiwupwmcezqutijl.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:54
Время сессии: 02:25:39
Время отчета: 21.05.2016 20:11:58
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://oasmavkjmcxctdkit.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://oasmavkjmcxctdkit.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Локальное время:16.05.2016 13:28:57
Время сессии: 02:25:42
Время отчета: 21.05.2016 20:11:59
Процесс: C:\windows\Explorer.EXE
Информация о процессе:Microsoft Corporation | Besturingssysteem Microsoft® Windows® | 6.00.2900.5512
Источник: http://kazrkkpoctlrwosko.net/iUx
Тип: HTTP запрос
Размер (байты): 180
----------------------------------------
http://kazrkkpoctlrwosko.net/iUx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:1024
Referer: -
User input:
POST data:
H4;E??O:’'\?? !E
========================================
Bot ID: BIE_7875768F24DCA588
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1031
Локальное время:22.05.2016 00:37:03
GMT: +2:00
Время сессии: 00:19:23
Время отчета: 21.05.2016 22:37:27
Страна: ??
IPv4: 84.155.201.91
Процесс: C:\Programme\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://toolbarqueries.google.de/tbr?client=navclient-auto&iqrn=Ock&ie=UTF-8&oe=UTF-8&features=Rank:&q=info:https%3a%2f%2fwww.facebook .com%2f&ch=771696889808
Тип: HTTP запрос
Размер (байты): 374
----------------------------------------
http://toolbarqueries.google.de/tbr?client=navclient-auto&iqrn=Ock&ie=UTF-8&oe=UTF-8&features=Rank:&q=info:https%3a%2f%2fwww.facebook .com%2f&ch=771696889808
User-Agent: Mozilla/4.0 (compatible; GoogleToolbar 7.5.7210.1528; Windows XP 5.1; MSIE 8.0.6001.18702)
Cookie: -
Accept-Language: de
Accept-Encoding: -
Screen(w:h): 1280:960
Referer: -
User input:
POST data:
*EMPTY*
========================================
Локальное время:22.05.2016 00:37:03
Время сессии: 00:19:23
Время отчета: 21.05.2016 22:37:28
Процесс: C:\Programme\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://toolbarqueries.google.de/tbr?client=navclient-auto&iqrn=OwtC&orig=0oDHJ&ie=UTF-8&oe=UTF-8&features=Rank:&q=info:https%3a%2f%2fwww.facebook .com%2f&googleip=O;172.217.18.164;275&ch=771696889 808
Тип: HTTP запрос
Размер (байты): 416
----------------------------------------
http://toolbarqueries.google.de/tbr?client=navclient-auto&iqrn=OwtC&orig=0oDHJ&ie=UTF-8&oe=UTF-8&features=Rank:&q=info:https%3a%2f%2fwww.facebook .com%2f&googleip=O;172.217.18.164;275&ch=771696889 808
User-Agent: Mozilla/4.0 (compatible; GoogleToolbar 7.5.7210.1528; Windows XP 5.1; MSIE 8.0.6001.18702)
Cookie: -
Accept-Language: de
Accept-Encoding: -
Screen(w:h): 1280:960
Referer: -
User input:
POST data:
*EMPTY*
========================================
Bot ID: CLEAR2PA-7C49E6_7875768F120FBB7C
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1033
Локальное время:19.05.2016 11:45:22
GMT: +2:00
Время сессии: 00:13:40
Время отчета: 21.05.2016 17:05:44
Страна: ??
IPv4: 81.61.7.70
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Fwww.hotgirlclub.com%2Fvideo s%2F3352%2Fmilf-nikki-benz-and-busty-riley-reid-take-part-in-threesome-massage-session%2F&callback=atajsshctcbrbwmT
Тип: HTTP запрос
Размер (байты): 629
----------------------------------------
http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Fwww.hotgirlclub.com%2Fvideo s%2F3352%2Fmilf-nikki-benz-and-busty-riley-reid-take-part-in-threesome-massage-session%2F&callback=atajsshctcbrbwmT
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; InfoPath.2; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Cookie: -
Accept-Language: fr-be
Accept-Encoding: gzip, deflate
Screen(w:h): 1440:900
Referer: http://www.hotgirlclub.com/videos/3352/milf-nikki-benz-and-busty-riley-reid-take-part-in-threesome-massage-session/
User input:
POST data:
*EMPTY*
========================================
Bot ID: COM-05_1F3D59E94CAFD2C5
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven x64, SP 1
Язык ОС: 1033
Локальное время:20.05.2016 08:40:47
GMT: +0:00
Время сессии: 00:55:52
Время отчета: 21.05.2016 09:23:01
Страна: ??
IPv4: 182.52.222.221
Процесс: C:\Windows\SysWOW64\explorer.exe
Информация о процессе:Microsoft Corporation | Microsoft® Windows® Operating System | 6.1.7600.16385
Источник: https://115.78.239.17/EcKuvF3lVN.php
Тип: HTTPS запрос
Размер (байты): 374
----------------------------------------
https://115.78.239.17/EcKuvF3lVN.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 800:600
Referer: -
User input:
POST data:
gzwbehzfz=XOpYsYFnEejCpeE9TwDpAm2de4oxMhyADGV2YsX7 EVA25W00Z3tYBAWfgLCi46KC2ks6nIFVNZr21ryUxBxyyXmySk Y4nKtEVE8XiKX89oBAY9B3A/YA2UrlFjPMCdcBAX9rOEg0RSjRxdvYVjwUgW 2WK23y6RBDJRjs892PN zry3u8/XfijP p/dnOnt56I75L95LfqrgTinu
========================================
Локальное время:20.05.2016 08:41:11
Время сессии: 00:56:16
Время отчета: 21.05.2016 09:23:05
Процесс: C:\ProgramData\bpmkwkdh.exe
Информация о процессе: | |
Источник: http://5.45.72.34/cmd.php
Тип: HTTP запрос
Размер (байты): 157
----------------------------------------
http://5.45.72.34/cmd.php
User-Agent: -
Cookie: -
Accept-Language: th-TH
Accept-Encoding: -
Screen(w:h): 800:600
Referer: -
User input:
POST data:
status=3
========================================
Bot ID: CRIS_7BF1A2E1F8986C44
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 3082
Локальное время:16.05.2016 21:07:31
GMT: +2:00
Время сессии: 00:41:04
Время отчета: 21.05.2016 07:54:14
Страна: ??
IPv4: 2.137.190.100
Процесс: C:\Archivos de programa\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://rover.ebay.com/ar/1/710-53481-19255-0/1?adtype=1&size=1x1&type=1&campid=5336102271&tooli d=10001&customid=&mpt=105980025608
Тип: HTTP запрос
Размер (байты): 590
----------------------------------------
http://rover.ebay.com/ar/1/710-53481-19255-0/1?adtype=1&size=1x1&type=1&campid=5336102271&tooli d=10001&customid=&mpt=105980025608
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; MAAU; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; MAAU)
Cookie: npii=btrm/svid%3D111003339832252070591b48a4^cguid/92208c761540a621a882bf82fc6c2874591b48a4^tguid/92208c761540a621a882bf82fc6c2875591b48a4^
Accept-Language: es
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:600
Referer: http://www.searchnu.com/406
User input:
POST data:
*EMPTY*
========================================
Bot ID: DELL_7BF1A2E1B91B25C8
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1033
Локальное время:19.05.2016 12:45:26
GMT: -5:00
Время сессии: 194:29:18
Время отчета: 21.05.2016 20:42:10
Страна: ??
IPv4: 69.131.36.43
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://speedtestdb101.svc.tds.net/speedtest_api.php
Тип: HTTP запрос
Размер (байты): 1 652
----------------------------------------
http://speedtestdb101.svc.tds.net/speedtest_api.php
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: eternalchip=NjkuMTMxLjM2LjQzOjE0NDk0MjQzNDE%3D; session=8a1ac8380cfe82ac9f465253f5a545abd743e901-1453922196; s_nr=1462798828812; dslv=1463679753906; s_vnum=1465390774328%26vn%3D26; __gads=ID=c0a8b9dddd91560b:T=1449424375:S=ALNI_MYa jNA8INzRqk41mg51_4oXgehsnw; chekusername=jimcon.tds.net; chekdomain=tdstelecom; services_tab_opened_component-3a-2f-2fSynacor-2fPortal-2fComponents-2fServices-2fLoggedIn-2f=zone%3A%2F%2FSynacor%2FPortal%2FPages%2FHome%2F Zones%2FTopRight%2FChoice%2FDefault%2F%7Ccomponent %3A%2F%2FSynacor%2FPortal%2FComponents%2FServices% 2FLoggedIn%2F%7Ccomponent%3A%2F%2FSynacor%2FPortal %2FComponents%2FChoice%2FEmail%2F; tds_mailDisclaimer=1; grvinsights=bdb42c2c468f0fe19718e7e9adb40583; Synacor_0=%7B%22garnet_liveads31pc%22%3A%5B1526751 755%2C%2254901%22%5D%7D; synmaxymizer2=1; cto_syn; dslv_s=Less%20than%201%20day; s_invisit=true; omni_gpn=homepage; temporalchip=NjkuMTMxLjM2LjQzOjE0NjM2Nzk2MDA%3D; s_cc=true; s_sq=%5B%5BB%5D%5D; s_ppv=41
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://speedtest.tds.net/netgauge.swf?v=3.0/[[DYNAMIC]]/1/[[DYNAMIC]]/4
User input:
POST data:
hash=96d641ac1ead7256696d1c6d965dce43
upload=567
download=1766
latency=64
packetloss=%2D1
methodid=1
serverport=8080
clientip=69%2E131%2E36%2E43
testmethod=tcp
serverurl=speedtest%2Etds%2Enet%3A8080
serverid=17
testurl=http%3A%2F%2Fspeedtest%2Etds%2Enet%2Fnetga uge%2Eswf%3Fv%3D3%2E0
customer=tdstelecom
jitter=1
========================================
Bot ID: DELL-PC_E532648A64F02664
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven, SP 1
Язык ОС: 1033
Локальное время:20.05.2016 04:32:10
GMT: +0:00
Время сессии: 00:01:30
Время отчета: 21.05.2016 00:02:39
Страна: ??
IPv4: 12.232.133.66
Процесс: C:\Windows\explorer.exe
Информация о процессе:Microsoft Corporation | Microsoft® Windows® Operating System | 6.1.7600.16385
Источник: https://14.168.119.30/MmHux4jkjX5ayGXpVW.php
Тип: HTTPS запрос
Размер (байты): 385
----------------------------------------
https://14.168.119.30/MmHux4jkjX5ayGXpVW.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input:
POST data:
uqbqgny=5qpeE3rcWECNpSsp3VDS8r1Rh6nGfF3oEveYDtK3Hx LkWH7JeCdSErcqSp xm8L0/0ZogZH594JJN6HHJiWhRLxrxCcxB9x8HEWeXiEDHhj in/enhnvER6CjSijzJpUZJDJLwwE5KwBsDP1Pbg4WKTab89BGY71o yq06vlSY1e3SNvdLn7G1fr7b0R9tbclql7IZ46tx1KKlcoFq2r g
========================================
Локальное время:20.05.2016 04:32:27
Время сессии: 00:01:47
Время отчета: 21.05.2016 00:02:44
Процесс: C:\Windows\explorer.exe
Информация о процессе:Microsoft Corporation | Microsoft® Windows® Operating System | 6.1.7600.16385
Источник: https://42.112.92.248/MmHux4jkjX5ayGXpVW.php
Тип: HTTPS запрос
Размер (байты): 380
----------------------------------------
https://42.112.92.248/MmHux4jkjX5ayGXpVW.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input:
POST data:
snrurgdbxw=hqw2Q5xFZpkQpwo1DOZ gIFQUtB2jLqq6jIbmzJIQfpRO0mVshOjs5J/t0sLRkYj/j9wqIKcfl 07mpwqaTOXBwBhdJZX/3I23VzCcFS73s998FLslYChnI00DDPDLAUL8Eoo5VMBps05ipu vVzdjJxmgEzPJN 9u5BeMsZZhqxUS/ 41q6vLOCE7zSN24pxuEpgauglqfc=
========================================
Bot ID: DELLPORT12_7875768F19258F0C
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1036
Локальное время:18.05.2016 18:12:40
GMT: +2:00
Время сессии: 02:52:56
Время отчета: 21.05.2016 14:35:00
Страна: ??
IPv4: 84.7.24.91
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Fwww.carvideotube.com%2Ffr%2 Fsexe-habill%C3%A9.html&callback=atajsshctcbopufn
Тип: HTTP запрос
Размер (байты): 615
----------------------------------------
http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Fwww.carvideotube.com%2Ffr%2 Fsexe-habill%C3%A9.html&callback=atajsshctcbopufn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; OfficeLiveConnector.1.4; OfficeLivePatch.1.3; .NET4.0C)
Cookie: lidc="b=TGST02:g=95:u=1:i=1463578993:t=1463665393:s=AQF2 PYa8PygKM_ka9dW5GSA7TQu_Pa_F"
Accept-Language: fr
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:800
Referer: http://www.carvideotube.com/fr/sexe-habillA©.html
User input:
POST data:
*EMPTY*
========================================
Bot ID: DOMARYSE_7BF1A2E117DEA1FB
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1036
Локальное время:16.05.2016 21:58:15
GMT: +2:00
Время сессии: 00:08:35
Время отчета: 21.05.2016 13:27:02
Страна: ??
IPv4: 90.45.141.103
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://trc.taboola.com/msn-france/log/3/visible
Тип: HTTP запрос
Размер (байты): 5 163
----------------------------------------
http://trc.taboola.com/msn-france/log/3/visible
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Orange 8.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322; .NET CLR 2.0.50727; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)
Cookie: taboola_session_id=v2_dc9bd8c49f300e817020b056aaca 110a_2543f743-a889-4c50-ac11-67ab60edb80d_1463428652_1463428664_CIi3jgYQr7w-GKHjldnLKiAC; taboola_upci=CI7XlZvLKhIPFQAAgEAd3DJ2QCWvl31AGPn2n AMY9vacAyIPFQAAQEAd3DI2QCWvlz1AIg8VAACAPx0AAIA_JQA AgD8qDxUAAIBAHdwydkAlr5d9QDDf9wc; JSESSIONID=.water439; t_gid=2543f743-a889-4c50-ac11-67ab60edb80d; t_vpub=CAETCK-8PhAFFA
Accept-Language: fr
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.msn.com/fr-fr/sport/football/le-real-de-zidane-meilleure-%c3%a9quipe-de-liga/ar-BBt6ETi?li=BBoJIji&ocid=onepro
User input:
POST data:
ri=00bd0da472240d757d5383182ef55bbf
sd=v2_dc9bd8c49f300e817020b056aaca110a_2543f743-a889-4c50-ac11-67ab60edb80d_1463428652_1463428664_CIi3jgYQr7w-GKHjldnLKiAC
ui=2543f743-a889-4c50-ac11-67ab60edb80d
pi=%2Ffr-fr%2Fsport%2Ffootball%2Fle-real-de-zidane-meilleure-%25c3%25a9quipe-de-liga%2Far-bbt6eti
wi=-8969233712380293444
pt=text
vi=1463428673953
li=rbox-t2m
il=
sil=%7E%7EV1%7E%7E-7949851126325723962%7E%7EUW-PGHyUGB1wBz1myP6IB-Zd-OZvduNb04vakITOUqSvjueBefd3a21OuJKG89vOL22_JxCjfOJ 5K_N3RQZRnw%2C%7E%7EV1%7E%7E4472516902942726609%7E %7EC2N00Y5EM1iu15N1po-9husGJowG5lgUsDh9W78ymxY70Q-Js_HAIr8zCLsriMK8L22_JxCjfOJ5K_N3RQZRnw%2C%7E%7EV1 %7E%7E2596574807690678656%7E%7EdJ5-Acx2wrCM9YzXkHxmV9ZddAHbQtZSE4Nsa4U_IOvMvUjyPQKouL gB4wQ7D3iOL22_JxCjfOJ5K_N3RQZRnw
ilt=
navil=
silt=photo%2Ctext%2Cphoto
ntil=
ntilt=
navilt=
niltp=
siltp=trafficaddicts-pausepeople%2Cmaigriravecsatetecefrsc%2Ctrafficadd icts-footespagnol-sc
naviltp=
ppb=COUD
cpb=EhgyMDktNy1SRUxFQVNFLSR7dmVyc2lvbn0YyAwgPCoZYW 0udGFib29sYXN5bmRpY2F0aW9uLmNvbTIId2F0ZXI0Mzk
tim=21%3A58%3A15.703
id=4227
llvl=1
cv=209-7-RELEASE-%24%7Bversion%7D
fil=%5B%7B%22tii%22%3A%22%7E%7EV1%7E%7E-7949851126325723962%7E%7EUW-PGHyUGB1wBz1myP6IB-Zd-OZvduNb04vakITOUqSvjueBefd3a21OuJKG89vOL22_JxCjfOJ 5K_N3RQZRnw%22%2C%22tipt%22%3A%22SP%22%2C%22tit%22 %3A%22photo%22%2C%22tids%22%3A%22vp%22%7D%2C%7B%22 tii%22%3A%22%7E%7EV1%7E%7E4472516902942726609%7E%7 EC2N00Y5EM1iu15N1po-9husGJowG5lgUsDh9W78ymxY70Q-Js_HAIr8zCLsriMK8L22_JxCjfOJ5K_N3RQZRnw%22%2C%22ti pt%22%3A%22SP%22%2C%22tit%22%3A%22text%22%2C%22tid s%22%3A%22vp%22%7D%2C%7B%22tii%22%3A%22%7E%7EV1%7E %7E2596574807690678656%7E%7EdJ5-Acx2wrCM9YzXkHxmV9ZddAHbQtZSE4Nsa4U_IOvMvUjyPQKouL gB4wQ7D3iOL22_JxCjfOJ5K_N3RQZRnw%22%2C%22tipt%22%3 A%22SP%22%2C%22tit%22%3A%22photo%22%2C%22tids%22%3 A%22vp%22%7D%2C%7B%22tii%22%3A%2232122435240637744 30%22%2C%22tipt%22%3A%22RC%22%2C%22tit%22%3A%22tex t%22%2C%22tids%22%3A%22nvp%22%7D%2C%7B%22tii%22%3A %22-5686940611176669707%22%2C%22tipt%22%3A%22RC%22%2C% 22tit%22%3A%22text%22%2C%22tids%22%3A%22nvp%22%7D% 2C%7B%22tii%22%3A%22-1568033281106762862%22%2C%22tipt%22%3A%22RC%22%2C% 22tit%22%3A%22text%22%2C%22tids%22%3A%22nvp%22%7D% 2C%7B%22tii%22%3A%22%7E%7EV1%7E%7E-4414515884774650730%7E%7EczPle69SoIaHOHSXwnNsgDWPk w_ha5JzOUmwE6theLl_Ijpp_7ZTwT4ljMtRKCKFL22_JxCjfOJ 5K_N3RQZRnw%22%2C%22tipt%22%3A%22SP%22%2C%22tit%22 %3A%22text%22%2C%22tids%22%3A%22nvp%22%7D%2C%7B%22 tii%22%3A%22%7E%7EV1%7E%7E-8422384791516711083%7E%7E-X7ij-V6RxAXygshK0oriGOYY7s8TF7X7xQQqQvNVKDnVJvYTZKmCLhr O6hJjYcyL22_JxCjfOJ5K_N3RQZRnw%22%2C%22tipt%22%3A% 22SP%22%2C%22tit%22%3A%22photo%22%2C%22tids%22%3A% 22nvp%22%7D%2C%7B%22tii%22%3A%22%7E%7EV1%7E%7E3395 351727505469578%7E%7EC0gdB7STK4xF0VwkBvS_yf22zgSxr-N4wdAApQehwUCngfbzB0WpjDP8EIjhA_vwL22_JxCjfOJ5K_N3 RQZRnw%22%2C%22tipt%22%3A%22SP%22%2C%22tit%22%3A%2 2text%22%2C%22tids%22%3A%22nvp%22%7D%2C%7B%22tii%2 2%3A%221775162934745315577%22%2C%22tipt%22%3A%22RC %22%2C%22tit%22%3A%22text%22%2C%22tids%22%3A%22nvp %22%7D%2C%7B%22tii%22%3A%22-1894750561396178037%22%2C%22tipt%22%3A%22RC%22%2C% 22tit%22%3A%22text%22%2C%22tids%22%3A%22nvp%22%7D% 2C%7B%22tii%22%3A%22-5022974916854487378%22%2C%22tipt%22%3A%22RC%22%2C% 22tit%22%3A%22text%22%2C%22tids%22%3A%22nvp%22%7D% 2C%7B%22tii%22%3A%22%7E%7EV1%7E%7E7988942370726936 890%7E%7EC8oMyfiNGfpZDBqpm-kNTXLRgjzKej6YqZrRAIjbJ26hdSSnQtRDifCGElQBZMtFL22_ JxCjfOJ5K_N3RQZRnw%22%2C%22tipt%22%3A%22SP%22%2C%2 2tit%22%3A%22text%22%2C%22tids%22%3A%22nvp%22%7D%2 C%7B%22tii%22%3A%22%7E%7EV1%7E%7E79079322326200438 30%7E%7ETQJUQEqV1GIWwZtbbnLSPl2JgpC_J_A0QiJkmNIBo4 jCKEyxoUE0txAKR2YvYH_GL22_JxCjfOJ5K_N3RQZRnw%22%2C %22tipt%22%3A%22SP%22%2C%22tit%22%3A%22text%22%2C% 22tids%22%3A%22nvp%22%7D%2C%7B%22tii%22%3A%22%7E%7 EV1%7E%7E6392804760815030059%7E%7EKusUC8cT_V-3i_O5e5JqqVSAUBJUy5KIfQ0yjpCUGAHEfiX-b9zS_6KHnb2qe6i7L22_JxCjfOJ5K_N3RQZRnw%22%2C%22tip t%22%3A%22SP%22%2C%22tit%22%3A%22text%22%2C%22tids %22%3A%22nvp%22%7D%2C%7B%22tii%22%3A%22-1558122720785244499%22%2C%22tipt%22%3A%22RC%22%2C% 22tit%22%3A%22text%22%2C%22tids%22%3A%22nvp%22%7D% 2C%7B%22tii%22%3A%22-7407788859576971246%22%2C%22tipt%22%3A%22RC%22%2C% 22tit%22%3A%22text%22%2C%22tids%22%3A%22nvp%22%7D% 2C%7B%22tii%22%3A%223138149561523577868%22%2C%22ti pt%22%3A%22RC%22%2C%22tit%22%3A%22text%22%2C%22tid s%22%3A%22nvp%22%7D%5D
========================================
Bot ID: DONATION-UVW6MQ_7875768F35A7E81F
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1033
Локальное время:21.05.2016 08:05:15
GMT: -4:00
Время сессии: 01:07:23
Время отчета: 21.05.2016 12:05:15
Страна: ??
IPv4: 63.135.4.100
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Flounderground.org%2F&callba ck=atajsshctcbvWdpW
Тип: HTTP запрос
Размер (байты): 412
----------------------------------------
http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Flounderground.org%2F&callba ck=atajsshctcbvWdpW
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-us
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:1024
Referer: http://lounderground.org/
User input:
POST data:
*EMPTY*
========================================
Bot ID: GLPC-BILGISAYAR_74DEB1E3E4C25658
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven
Язык ОС: 1055
Локальное время:18.05.2016 20:28:37
GMT: +3:00
Время сессии: 00:36:06
Время отчета: 21.05.2016 11:20:28
Страна: ??
IPv4: 78.163.173.44
Процесс: C:\Windows\explorer.exe
Информация о процессе:Microsoft Corporation | Microsoft® Windows® Isletim Sistemi | 6.1.7600.16385
Источник: https://171.5.202.29:995/HiKMrwabHXltX.php
Тип: HTTPS запрос
Размер (байты): 392
----------------------------------------
https://171.5.202.29:995/HiKMrwabHXltX.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input:
POST data:
pwrakjipadbi=Cjj9OxHNL3tYbGBQyoQIbsaDDmLuzbG4bJfEo mvqScEcNQnmtJ8/9ECcH/7ux9dBFdNVUd2HPwBqU8 D1uC9J73vLwNewonZ4LA1hys9TW1JEKLz8Py5AgEjsTB xcb6A/C0MlVudMKG5Vksj8LC29xtTaeMRDbA4q9YAUTx3dXOsK8M4Okk F58hz74jEV7N5jz1aKdIwWHAxrjUcIUzwA==
========================================
Локальное время:18.05.2016 20:28:58
Время сессии: 00:36:27
Время отчета: 21.05.2016 11:20:30
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 9.00.8112.16421
Источник: https://www.facebook.com/games/async/navigationslider/?referral_objects[0]=%7B%22app_id%22%3A816673585129491%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A453428678 2153359360%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYZneYaGG MxF_CM_wbBzqqCTY6dZu_-dIWOWbsSTEiFnT79ajXa3Ta2lbyPPraga8Zo%22%2C%22sourc e_query%22%3A%22GYMLRecommendedGamesAppQuery%22%2C %22query_type%22%3A%22GYMLRecommendedGamesAppQuery %22%2C%22query_rank%22%3A4%2C%22query_id%22%3A2612 668678201671680%7D%7D&referral_objects[1]=%7B%22app_id%22%3A245652638815422%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A646217085 2547887104%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYbfLVj1y 0kEyhDk6kPwWt61Pjz0TfMm28usW0yAUpArW_C1Pv6vy4r49Aj WaXjgdb4%22%2C%22source_query%22%3A%22GYMLRecommen dedGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRe commendedGamesAppQuery%22%2C%22query_rank%22%3A5%2 C%22query_id%22%3A2612668678201671680%7D%7D&referr al_objects[2]=%7B%22app_id%22%3A573250259436863%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A740665974 1763502080%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYZNBapQn ukm_CxB_QGtOINbQmG_gkywElrdh8VajwkHtUAeNrduLxgX2c4 cCFLJrus%22%2C%22source_query%22%3A%22GYMLRecommen dedGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRe commendedGamesAppQuery%22%2C%22query_rank%22%3A6%2 C%22query_id%22%3A2612668678201671680%7D%7D&referr al_objects[3]=%7B%22app_id%22%3A302826159782423%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A259147213 8422583296%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYZk9oFuE mVbnJuZPOhhaQZqd1H0N0UozF6bPZgd4tPFRcA04KLMM3IW7nv vNe42_LM%22%2C%22source_query%22%3A%22GYMLRecommen dedGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRe commendedGamesAppQuery%22%2C%22query_rank%22%3A7%2 C%22query_id%22%3A2612668678201671680%7D%7D&referr al_objects[4]=%7B%22app_id%22%3A133428240003776%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A816654271 1734665216%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYZgTXdOl 3wue_4t_4vKlRYgMYUKMoQhvY7nMDV0IT596L4EhIiwZqY9XvB 2jNmhyfo%22%2C%22source_query%22%3A%22GYMLRecommen dedGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRe commendedGamesAppQuery%22%2C%22query_rank%22%3A8%2 C%22query_id%22%3A2612668678201671680%7D%7D&referr al_objects[5]=%7B%22app_id%22%3A751112528322748%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A613107258 3908458496%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYbkiSpcp 3Nl36fDgjrjHAiXcxCmfb_WuPB8hllwujXc568ptFAqz3BFd8V bzFK9_-8%22%2C%22source_query%22%3A%22GYMLRecommendedGame sAppQuery%22%2C%22query_type%22%3A%22GYMLRecommend edGamesAppQuery%22%2C%22query_rank%22%3A9%2C%22que ry_id%22%3A2612668678201671680%7D%7D&referral_obje cts[6]=%7B%22app_id%22%3A128356060569714%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A571467084 022677504%2C%22gyml_type%22%3A%22canvas_install%22 %2C%22gyml_encrypted_prediction%22%3A%22AYb7czhKaR 1IMDcC3pt2Yoinmq7jwMt5hFVf1EBivc287P09mTvNIxbNaRM7 QnYUoWg%22%2C%22source_query%22%3A%22GYMLRecommend edGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRec ommendedGamesAppQuery%22%2C%22query_rank%22%3A10%2 C%22query_id%22%3A2612668678201671680%7D%7D&referr al_objects[7]=%7B%22app_id%22%3A336512696486951%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A303843153 9328188416%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYbBKjuCp D0ATYkwAyPnDwNVNWT6dnurPZ0qk2v-W7m_Nsuji9zk8AuFVn4nJUcBbHs%22%2C%22source_query%2 2%3A%22GYMLRecommendedGamesAppQuery%22%2C%22query_ type%22%3A%22GYMLRecommendedGamesAppQuery%22%2C%22 query_rank%22%3A11%2C%22query_id%22%3A261266867820 1671680%7D%7D&referral_objects[8]=%7B%22app_id%22%3A321278344586120%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A906763003 7301198848%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYbvVN_D_ a5OCixBEV_ArB3B5Phfe_tQB4Mm-aXG2jtkST07C4YLSIC32cJH6lln9i4%22%2C%22source_quer y%22%3A%22GYMLRecommendedGamesAppQuery%22%2C%22que ry_type%22%3A%22GYMLRecommendedGamesAppQuery%22%2C %22query_rank%22%3A12%2C%22query_id%22%3A261266867 8201671680%7D%7D&referral_objects[9]=%7B%22app_id%22%3A519132871435593%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A371140262 0544352256%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYY_ejmCg aefPyPiz5g9mTKnyA4MRbMtEbnOOnjNJfcW87uFoHDqWzKWHXL B-hVQ2ns%22%2C%22source_query%22%3A%22GYMLRecommende dGamesAppQuery%22%2C%22query_type%22%3A%22GYMLReco mmendedGamesAppQuery%22%2C%22query_rank%22%3A13%2C %22query_id%22%3A2612668678201671680%7D%7D&referra l_objects[10]=%7B%22app_id%22%3A165073083517174%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A187700070 3780585472%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYb9dj5mV vSZUcNfnwRDeJdkAAkgGXlmyv3CafoFuTFUIuojHa4YYfRWtUt S08xg6Gc%22%2C%22source_query%22%3A%22GYMLRecommen dedGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRe commendedGamesAppQuery%22%2C%22query_rank%22%3A14% 2C%22query_id%22%3A2612668678201671680%7D%7D&refer ral_objects[11]=%7B%22app_id%22%3A210831918949520%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A876805700 4708069376%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYbovouzI NlEM5_iY_q43h7kDLRWCJXLiZFMHmgnD5e5ujzqRb-_aBygfvE5Qfwm67E%22%2C%22source_query%22%3A%22GYML RecommendedGamesAppQuery%22%2C%22query_type%22%3A% 22GYMLRecommendedGamesAppQuery%22%2C%22query_rank% 22%3A15%2C%22query_id%22%3A2612668678201671680%7D% 7D&referral_objects[12]=%7B%22app_id%22%3A156192231185442%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A838098029 6996093952%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYZ0h6Wrt Ko3MtlNDuabWa8TX-NwbiQm7CrbStrVvMkyIFyY1a6KbLEu9OItWn9OQNY%22%2C%22 source_query%22%3A%22GYMLRecommendedGamesAppQuery% 22%2C%22query_type%22%3A%22GYMLRecommendedGamesApp Query%22%2C%22query_rank%22%3A16%2C%22query_id%22% 3A2612668678201671680%7D%7D&referral_objects[13]=%7B%22app_id%22%3A275236842519163%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A240346665 8074066944%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYaEsalY8 4RWGnVP-7Gq1C9g4g3OXsL7C-Pmw3Pahia3ZyEN6CflBmCPDzRynJug5-8%22%2C%22source_query%22%3A%22GYMLRecommendedGame sAppQuery%22%2C%22query_type%22%3A%22GYMLRecommend edGamesAppQuery%22%2C%22query_rank%22%3A17%2C%22qu ery_id%22%3A2612668678201671680%7D%7D&referral_obj ects[14]=%7B%22app_id%22%3A838811369541290%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A621834588 5571481600%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYYXiJOHD C-h1nv0zvpAdIwTjjv-hkZgXatPWZtfUpDiE2BRfX0ud4J_pPUVbPX4U5s%22%2C%22so urce_query%22%3A%22GYMLRecommendedGamesAppQuery%22 %2C%22query_type%22%3A%22GYMLRecommendedGamesAppQu ery%22%2C%22query_rank%22%3A18%2C%22query_id%22%3A 2612668678201671680%7D%7D&id=u_ps_0_8_1&num_items_ per_page=3&num_rows=1&width=205&height=54&dpr=1
Тип: HTTPS запрос
Размер (байты): 8 201
----------------------------------------
https://www.facebook.com/games/async/navigationslider/?referral_objects[0]=%7B%22app_id%22%3A816673585129491%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A453428678 2153359360%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYZneYaGG MxF_CM_wbBzqqCTY6dZu_-dIWOWbsSTEiFnT79ajXa3Ta2lbyPPraga8Zo%22%2C%22sourc e_query%22%3A%22GYMLRecommendedGamesAppQuery%22%2C %22query_type%22%3A%22GYMLRecommendedGamesAppQuery %22%2C%22query_rank%22%3A4%2C%22query_id%22%3A2612 668678201671680%7D%7D&referral_objects[1]=%7B%22app_id%22%3A245652638815422%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A646217085 2547887104%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYbfLVj1y 0kEyhDk6kPwWt61Pjz0TfMm28usW0yAUpArW_C1Pv6vy4r49Aj WaXjgdb4%22%2C%22source_query%22%3A%22GYMLRecommen dedGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRe commendedGamesAppQuery%22%2C%22query_rank%22%3A5%2 C%22query_id%22%3A2612668678201671680%7D%7D&referr al_objects[2]=%7B%22app_id%22%3A573250259436863%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A740665974 1763502080%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYZNBapQn ukm_CxB_QGtOINbQmG_gkywElrdh8VajwkHtUAeNrduLxgX2c4 cCFLJrus%22%2C%22source_query%22%3A%22GYMLRecommen dedGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRe commendedGamesAppQuery%22%2C%22query_rank%22%3A6%2 C%22query_id%22%3A2612668678201671680%7D%7D&referr al_objects[3]=%7B%22app_id%22%3A302826159782423%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A259147213 8422583296%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYZk9oFuE mVbnJuZPOhhaQZqd1H0N0UozF6bPZgd4tPFRcA04KLMM3IW7nv vNe42_LM%22%2C%22source_query%22%3A%22GYMLRecommen dedGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRe commendedGamesAppQuery%22%2C%22query_rank%22%3A7%2 C%22query_id%22%3A2612668678201671680%7D%7D&referr al_objects[4]=%7B%22app_id%22%3A133428240003776%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A816654271 1734665216%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYZgTXdOl 3wue_4t_4vKlRYgMYUKMoQhvY7nMDV0IT596L4EhIiwZqY9XvB 2jNmhyfo%22%2C%22source_query%22%3A%22GYMLRecommen dedGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRe commendedGamesAppQuery%22%2C%22query_rank%22%3A8%2 C%22query_id%22%3A2612668678201671680%7D%7D&referr al_objects[5]=%7B%22app_id%22%3A751112528322748%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A613107258 3908458496%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYbkiSpcp 3Nl36fDgjrjHAiXcxCmfb_WuPB8hllwujXc568ptFAqz3BFd8V bzFK9_-8%22%2C%22source_query%22%3A%22GYMLRecommendedGame sAppQuery%22%2C%22query_type%22%3A%22GYMLRecommend edGamesAppQuery%22%2C%22query_rank%22%3A9%2C%22que ry_id%22%3A2612668678201671680%7D%7D&referral_obje cts[6]=%7B%22app_id%22%3A128356060569714%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A571467084 022677504%2C%22gyml_type%22%3A%22canvas_install%22 %2C%22gyml_encrypted_prediction%22%3A%22AYb7czhKaR 1IMDcC3pt2Yoinmq7jwMt5hFVf1EBivc287P09mTvNIxbNaRM7 QnYUoWg%22%2C%22source_query%22%3A%22GYMLRecommend edGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRec ommendedGamesAppQuery%22%2C%22query_rank%22%3A10%2 C%22query_id%22%3A2612668678201671680%7D%7D&referr al_objects[7]=%7B%22app_id%22%3A336512696486951%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A303843153 9328188416%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYbBKjuCp D0ATYkwAyPnDwNVNWT6dnurPZ0qk2v-W7m_Nsuji9zk8AuFVn4nJUcBbHs%22%2C%22source_query%2 2%3A%22GYMLRecommendedGamesAppQuery%22%2C%22query_ type%22%3A%22GYMLRecommendedGamesAppQuery%22%2C%22 query_rank%22%3A11%2C%22query_id%22%3A261266867820 1671680%7D%7D&referral_objects[8]=%7B%22app_id%22%3A321278344586120%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A906763003 7301198848%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYbvVN_D_ a5OCixBEV_ArB3B5Phfe_tQB4Mm-aXG2jtkST07C4YLSIC32cJH6lln9i4%22%2C%22source_quer y%22%3A%22GYMLRecommendedGamesAppQuery%22%2C%22que ry_type%22%3A%22GYMLRecommendedGamesAppQuery%22%2C %22query_rank%22%3A12%2C%22query_id%22%3A261266867 8201671680%7D%7D&referral_objects[9]=%7B%22app_id%22%3A519132871435593%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A371140262 0544352256%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYY_ejmCg aefPyPiz5g9mTKnyA4MRbMtEbnOOnjNJfcW87uFoHDqWzKWHXL B-hVQ2ns%22%2C%22source_query%22%3A%22GYMLRecommende dGamesAppQuery%22%2C%22query_type%22%3A%22GYMLReco mmendedGamesAppQuery%22%2C%22query_rank%22%3A13%2C %22query_id%22%3A2612668678201671680%7D%7D&referra l_objects[10]=%7B%22app_id%22%3A165073083517174%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A187700070 3780585472%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYb9dj5mV vSZUcNfnwRDeJdkAAkgGXlmyv3CafoFuTFUIuojHa4YYfRWtUt S08xg6Gc%22%2C%22source_query%22%3A%22GYMLRecommen dedGamesAppQuery%22%2C%22query_type%22%3A%22GYMLRe commendedGamesAppQuery%22%2C%22query_rank%22%3A14% 2C%22query_id%22%3A2612668678201671680%7D%7D&refer ral_objects[11]=%7B%22app_id%22%3A210831918949520%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A876805700 4708069376%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYbovouzI NlEM5_iY_q43h7kDLRWCJXLiZFMHmgnD5e5ujzqRb-_aBygfvE5Qfwm67E%22%2C%22source_query%22%3A%22GYML RecommendedGamesAppQuery%22%2C%22query_type%22%3A% 22GYMLRecommendedGamesAppQuery%22%2C%22query_rank% 22%3A15%2C%22query_id%22%3A2612668678201671680%7D% 7D&referral_objects[12]=%7B%22app_id%22%3A156192231185442%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A838098029 6996093952%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYZ0h6Wrt Ko3MtlNDuabWa8TX-NwbiQm7CrbStrVvMkyIFyY1a6KbLEu9OItWn9OQNY%22%2C%22 source_query%22%3A%22GYMLRecommendedGamesAppQuery% 22%2C%22query_type%22%3A%22GYMLRecommendedGamesApp Query%22%2C%22query_rank%22%3A16%2C%22query_id%22% 3A2612668678201671680%7D%7D&referral_objects[13]=%7B%22app_id%22%3A275236842519163%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A240346665 8074066944%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYaEsalY8 4RWGnVP-7Gq1C9g4g3OXsL7C-Pmw3Pahia3ZyEN6CflBmCPDzRynJug5-8%22%2C%22source_query%22%3A%22GYMLRecommendedGame sAppQuery%22%2C%22query_type%22%3A%22GYMLRecommend edGamesAppQuery%22%2C%22query_rank%22%3A17%2C%22qu ery_id%22%3A2612668678201671680%7D%7D&referral_obj ects[14]=%7B%22app_id%22%3A838811369541290%2C%22fb_source% 22%3A1303%2C%22data_gt%22%3A[]%2C%22extra_data%22%3A%7B%22gyml_id%22%3A621834588 5571481600%2C%22gyml_type%22%3A%22canvas_install%2 2%2C%22gyml_encrypted_prediction%22%3A%22AYYXiJOHD C-h1nv0zvpAdIwTjjv-hkZgXatPWZtfUpDiE2BRfX0ud4J_pPUVbPX4U5s%22%2C%22so urce_query%22%3A%22GYMLRecommendedGamesAppQuery%22 %2C%22query_type%22%3A%22GYMLRecommendedGamesAppQu ery%22%2C%22query_rank%22%3A18%2C%22query_id%22%3A 2612668678201671680%7D%7D&id=u_ps_0_8_1&num_items_ per_page=3&num_rows=1&width=205&height=54&dpr=1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Cookie: c_user=1174101184; csm=2; x-referer=https%3A%2F%2Fapps.facebook.com%2Fihaleli-batak%2F%3Ffb_source%3Dbookmark%26ref%3Dbookmarks% 26count%3D0%26fb_bmpos%3D_0%23%2Fihaleli-batak%2F%3Ffb_source%3Dbookmark%26ref%3Dbookmarks% 26count%3D0%26fb_bmpos%3D_0; p=-2; presence=EDvF3EtimeF1463592492EuserFA21174101184A2 EstateFDt2F_5b_5dElm2FnullEuct2F1463590715BEtrFnul lEtwF1532422395EatF1463592352081EutF0CEchFDp_5f117 4101184F0CC; act=1463592515854%2F17
Accept-Language: tr
Accept-Encoding: gzip, deflate
Screen(w:h): 1366:768
Referer: https://www.facebook.com/
User input: ih
POST data:
*EMPTY*
========================================
Локальное время:18.05.2016 20:30:00
Время сессии: 00:37:29
Время отчета: 21.05.2016 11:20:31
Процесс: C:\Windows\explorer.exe
Информация о процессе:Microsoft Corporation | Microsoft® Windows® Isletim Sistemi | 6.1.7600.16385
Источник: https://217.215.237.143:6881/HiKMrwabHXltX.php
Тип: HTTPS запрос
Размер (байты): 380
----------------------------------------
https://217.215.237.143:6881/HiKMrwabHXltX.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input:
POST data:
slmywtla=pNukytEcmNUPWrZi6aHz5NwqmoeCSXWhDu0N5le/TSv1H/L0n5uu5mTf8gFGKUq65eB5fb9mwBIgMKYoQGezDt8U3/TeqHBqjBXBFc6ayAVtGiCCtFZn0Xqj33U3CcTyQgxq1szmgP1c/iFz549LiVr/QRjvh18hp4hrlnnciIWJoUSF5S4/4dPWsOvMvWWR17J7KXuzQ3I=
========================================
Bot ID: HOFFMANNXP_7BF1A2E1DC845264
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1031
Локальное время:14.05.2016 17:12:18
GMT: +2:00
Время сессии: 00:42:14
Время отчета: 21.05.2016 14:08:17
Страна: ??
IPv4: 84.133.223.224
Процесс: C:\Programme\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.fremdgehen69.com/index.php
Тип: HTTP запрос
Размер (байты): 2 264
----------------------------------------
http://www.fremdgehen69.com/index.php
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 2.0.50727)
Cookie: clpt=4a1e5575e0a3d2757cde820647afd90411d70bfe4f47c 8c47ec2d35e732276925390dd61b31ec87e8f1abf4037b6aa5 ca12f2b4e69690f643f7e080a2d1a584ecaa15cba91c0a97a5 fc69f9f0a43bb3ef6cab210e7a805fcfbc11ee5df7a04d5321 abeddec8c930216285b1bbde20f1fc34c27d4a059d0826926f 44fd059b2284da2d9aa55eafd763af772034bb64663e8c1525 368e26edaa92a5dde0d501a252f33febe29b3d642aab5194e5 3e8a456e9cbb852b3d0c5e1f4be0cf1dd8142b34f48d7a1614 94357a300ab2f5380a1e4d74d46f23559de3c508c3d6f07742 a6d2e0764f8b0d680876c190e6ad634b8074e6f14e60bdfd52 5badf55a6bedcf567538f7485ec6a95d31fd47b9c40d6c79e0 41778d4a79906cd8daec14d8a141e49; optimizelyEndUserId=oeu1463238360140r0.25564430361 66979; optimizelySegments=%7B%224568987839%22%3A%22true%2 2%2C%223038300324%22%3A%22none%22%2C%223039500300% 22%3A%22campaign%22%2C%224142741805%22%3A%22true%2 2%2C%224158960015%22%3A%22true%22%2C%223015820284% 22%3A%22false%22%2C%223033490366%22%3A%22ie%22%7D; optimizelyBuckets=%7B%225605700397%22%3A%225593552 672%22%7D; optimizelyReferrer; _ga=GA1.2.1234882601.1463238363; _msuuid_mwe2uo6n20=A76E85F3-263E-477C-A2FA-6DA51ECAFD7B; _gat=1; PHPSESSIONID=0f6c690933f1455cf902ba96d67c458d; datingvar8=YToxNjp7czo1OiJFTWFpbCI7czoyMjoiZmxvLmh vZmZtYW5uODZAZ214Lm5ldCI7czoxMToiRmxpcnRVc2VySUQiO 2k6MjUyNDg5NDM7czo3OiJWRVJTSU9OIjtzOjM6IjIuNCI7czo 3OiJSZWZlcmVyIjtOO3M6OToiYXV0b0xvZ2luIjtiOjE7czoxN DoiYXV0b0xvZ2luVG9rZW4iO3M6NDA6IkYrVE1zUzcwdTVRdE9 pM3NMTE1MdDQvRVFzQ1ZXc3JYdUtsWTB5TT0iO3M6ODoiYWZmO ldNSUQiO3M6NToiODU3ODEiO3M6NzoiYWZmOlBJRCI7TjtzOjc 6ImFmZjpNSUQiO047czo5OiJhZmY6V01NSUQiO047czoxNToiY WZmOkZpcnN0U291cmNlIjtOO3M6MTg6ImFmZjpGaXJzdFNvdXJ jZUlEMSI7TjtzOjE4OiJhZmY6Rmlyc3RTb3VyY2VJRDIiO047c zo4OiJhZmY6c2NpZCI7TjtzOjg6ImFmZjpUUklEIjtOO3M6ODo iYWZmOndzSUQiO047fQ==; affsys=sexmoney; OnlineTeaserDisplayed; soid=25248943; ne3287hd8=1
Accept-Language: de
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.fremdgehen69.com/index.php
User input: ft<remdgehem<n 69 ranger143.flo1986.
POST data:
showpane=11
event=saveNotifications
activeAccordion=options
notify%3Ainterval=NEVER
notify%3Asave=
========================================
Bot ID: HORMOZCOPY-PC_E532648AAA4F7F2D
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven, SP 1
Язык ОС: 1033
Локальное время:16.05.2016 21:50:49
GMT: +4:00
Время сессии: 00:01:43
Время отчета: 21.05.2016 03:33:59
Страна: ??
IPv4: 80.191.152.89
Процесс: C:\Program Files\Ginger\GingerClient.exe
Информация о процессе:Ginger Software | Ginger | 3.7.63
Источник: http://tr.gingersoftware.com/trackingEP.php
Тип: HTTP запрос
Размер (байты): 1 998
----------------------------------------
http://tr.gingersoftware.com/trackingEP.php
User-Agent: -
Cookie: __utma=61108922.573478501.1463338187.1463348992.14 63352593.5; __utmz=61108922.1463338187.1.1.utmcsr=(direct)|utm ccn=(direct)|utmcmd=(none); webTracking=%7B%22visitorId%22%3A%22acf32bbc-b5d2-47f6-a1ad-0ef65b896d18%22%2C%22pageUrl%22%3A%22http%3A%2F%2F www.gingersoftware.com%2FPersonalDictionary%2F01-1463467960753-802%3Fmedia%3Dstandalone%22%2C%22referrer%22%3A%22 %22%2C%22channel%22%3A%22direct%22%2C%22cpn%22%3A% 22%22%2C%22urlParams%22%3A%7B%22media%22%3A%22stan dalone%22%7D%2C%22newVisitorReported%22%3A%22true% 22%2C%22_expirationDate%22%3A1465930187411%7D; _ga=GA1.2.573478501.1463338187; vmi=%7B%22ver%22%3A%223.7.63.0%22%2C%22url%22%3A%2 2http%3A%2F%2Fdownloads.gingersoftware.com%2Fdownl oads%2Ftinyinstaller%2Fa%2FGinger.exe%22%2C%22_exp irationDate%22%3A1465930190374%7D
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input:
POST data:
cmd=reportEvents
events=[
{
"clientTime" : "2016-05-16T21:50:16Z",
"payload" : {
"GingerUserName" : "61faa8b2-e205-4f50-a945-37de23984240",
"UID" : "HD:628522655,MAC850E652E323",
"affid" : "A",
"canTalkToGS" : true,
"chnl" : "gingersitedl",
"clientVersion" : "3.7.63",
"moduleName" : "DC",
"sendingModule" : "DC",
"tid" : "Monetization",
"type" : "HealthReportEvent"
},
"source" : "Integrated-DesktopClient",
"version" : "1.0"
},
{
"clientTime" : "2016-05-16T21:50:16Z",
"payload" : {
"GingerUserName" : "61faa8b2-e205-4f50-a945-37de23984240",
"UID" : "HD:628522655,MAC850E652E323",
"affid" : "A",
"chnl" : "gingersitedl",
"clientVersion" : "3.7.63",
"moduleName" : "DC",
"sendingModule" : "DC",
"tid" : "Monetization",
"type" : "ModuleLoadedEvent"
},
"source" : "Integrated-DesktopClient",
"version" : "1.0"
}
]
========================================
Bot ID: HP-PC_74DEB1E36522DF69
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven x64
Язык ОС: 1033
Локальное время:21.05.2016 13:22:30
GMT: +0:00
Время сессии: 00:10:24
Время отчета: 21.05.2016 13:22:34
Страна: ??
IPv4: 23.27.244.176
Процесс: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.7600.16385
Источник: http://ad4.liverail.com/
Тип: HTTP запрос
Размер (байты): 6 432
----------------------------------------
http://ad4.liverail.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
Cookie: -
Accept-Language: en-GB
Accept-Encoding: gzip, deflate
Screen(w:h): 1366:768
Referer: http://scontent.lrcdn.net/outbound-cdn-static/swf/v4/admanager.swf?LR_PUBLISHER_ID=11230&LR_AUTOPLAY=0& LR_MUTED=0&LR_CONTENT=6&LR_TITLE=VISU
User input:
POST data:
LR%5FBROWSER%5FFEATURES=%7B%22ua%22%3A%22Mozilla%2 F4%2E0%20%28compatible%3B%20MSIE%208%2E0%3B%20Wind ows%20NT%206%2E1%3B%20WOW64%3B%20Trident%2F4%2E0%3 B%20SLCC2%3B%20%2ENET%20CLR%202%2E0%2E50727%3B%20% 2ENET%20CLR%203%2E5%2E30729%3B%20%2ENET%20CLR%203% 2E0%2E30729%3B%20Media%20Center%20PC%206%2E0%29%22 %2C%22css%5Fall%22%3Afalse%2C%22cfq%22%3Afalse%2C% 22scope%22%3Afalse%2C%22sticky%22%3Afalse%2C%22scr oll%22%3Afalse%2C%22plugins%22%3A0%2C%22pmode%22%3 Afalse%2C%22colorDepth%22%3A32%2C%22websql%22%3Afa lse%2C%22dnd%22%3Atrue%2C%22ce%22%3Afalse%2C%22imp %22%3Afalse%2C%22tz%22%3A%2D180%2C%22ogg%22%3Afals e%2C%22dialog%22%3Afalse%2C%22video%22%3Afalse%2C% 22audio%22%3Afalse%2C%22chrome%22%3Afalse%2C%22chr omewebstore%22%3Afalse%2C%22random%22%3Afalse%2C%2 2ie%22%3Afalse%2C%22userdata%22%3Afalse%2C%22srcse t%22%3Afalse%2C%22canvas%22%3Afalse%2C%22pic%22%3A false%2C%22wc%22%3Afalse%2C%22ext%22%3Afalse%2C%22 devorient%22%3Afalse%2C%22devmotion%22%3Afalse%2C% 22time%22%3A0%7D
LR%5FVIEWABLE=2
LR%5FPLUGIN%5FBROWSER%5FFEATURES=%7B%22ua%22%3A%22 Mozilla%2F4%2E0%20%28compatible%3B%20MSIE%208%2E0% 3B%20Windows%20NT%206%2E1%3B%20WOW64%3B%20Trident% 2F4%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202%2E0%2E507 27%3B%20%2ENET%20CLR%203%2E5%2E30729%3B%20%2ENET%2 0CLR%203%2E0%2E30729%3B%20Media%20Center%20PC%206% 2E0%29%22%2C%22version%22%3A%224%2E0%20%28compatib le%3B%20MSIE%208%2E0%3B%20Windows%20NT%206%2E1%3B% 20WOW64%3B%20Trident%2F4%2E0%3B%20SLCC2%3B%20%2ENE T%20CLR%202%2E0%2E50727%3B%20%2ENET%20CLR%203%2E5% 2E30729%3B%20%2ENET%20CLR%203%2E0%2E30729%3B%20Med ia%20Center%20PC%206%2E0%29%22%2C%22platform%22%3A %22Win32%22%2C%22isIframe%22%3Atrue%2C%22ref%22%3A %22http%3A%2F%2Fdelivery%2Etechbrowsing%2Ecom%2Fpl ayer%2Dmulti%2Ephp%3Fzoneid%3D471%26w%3D480%26h%3D 270%26ver%3Dold%26ref%3Dhttp%253A%252F%252Ftechbro wsing%2Ecom%252F%253Ffrom%253Dland%26affr%3Ddispla yed%5Fiframe%5Ftbland%26pos%3Dright%26af%5Fvideo%3 D%252Fcached%5Fimages%252Ffull%252Fvisual%2Dartist s%2Dotherworldly%2Dhermes%2Dexhibit%2Eflv%26thumbn ail%3D%252Fcached%5Fimages%252Fthumbnail%252Fvisua l%2Dartists%2Dotherworldly%2Dhermes%2Dexhibit%5F64 0%5F480%2Ejpg%26v%5Ftitle%3DVISUAL%2BARTIST%2527S% 2B%2527OTHERWORLDLY%2527%2BHERMES%2BEXHIBIT%22%2C% 22url%22%3A%22http%3A%2F%2Fdelivery%2Etechbrowsing %2Ecom%2Fvpaid%5Fplayer%2Ephp%3Faf%5Fplayer%5Fad%3 D1%26n%3D1463763382%22%2C%22width%22%3A1366%2C%22h eight%22%3A768%2C%22awidth%22%3A1366%2C%22aheight% 22%3A768%2C%22left%22%3A%2D31990%2C%22top%22%3A%2D 31723%2C%22css%5Fall%22%3Afalse%2C%22cfq%22%3Afals e%2C%22scope%22%3Afalse%2C%22sticky%22%3Afalse%2C% 22scroll%22%3Afalse%2C%22plugins%22%3A0%2C%22pmode %22%3Afalse%2C%22colorDepth%22%3A32%2C%22websql%22 %3Afalse%2C%22dnd%22%3Atrue%2C%22ce%22%3Afalse%2C% 22imp%22%3Afalse%2C%22tz%22%3A%2D180%2C%22ogg%22%3 Afalse%2C%22dialog%22%3Afalse%2C%22video%22%3Afals e%2C%22audio%22%3Afalse%2C%22ac%22%3Afalse%2C%22an cestor%22%3A%22%22%2C%22chrome%22%3Afalse%2C%22chr omewebstore%22%3Afalse%2C%22random%22%3Afalse%2C%2 2ie%22%3Afalse%2C%22userdata%22%3Afalse%2C%22srcse t%22%3Afalse%2C%22canvas%22%3Afalse%2C%22emoji%22% 3Afalse%2C%22pic%22%3Afalse%2C%22wc%22%3Afalse%2C% 22ext%22%3Afalse%2C%22pop%22%3Afalse%2C%22href%22% 3A%22http%3A%2F%2Fdelivery%2Etechbrowsing%2Ecom%2F vpaid%5Fplayer%2Ephp%3Faf%5Fplayer%5Fad%3D1%26n%3D 1463763382%22%2C%22devorient%22%3Afalse%2C%22devmo tion%22%3Afalse%2C%22canvasfp%22%3A0%2C%22time%22% 3A0%2C%22feature%5Ftimes%22%3A%7B%22ua%22%3A0%2C%2 2version%22%3A0%2C%22platform%22%3A0%2C%22isIframe %22%3A0%2C%22ref%22%3A0%2C%22url%22%3A0%2C%22width %22%3A0%2C%22height%22%3A0%2C%22awidth%22%3A0%2C%2 2aheight%22%3A0%2C%22left%22%3A0%2C%22top%22%3A0%2 C%22css%5Fall%22%3A0%2C%22cfq%22%3A0%2C%22cssvar%2 2%3A0%2C%22scope%22%3A0%2C%22sticky%22%3A0%2C%22sc roll%22%3A0%2C%22plugins%22%3A0%2C%22pmode%22%3A0% 2C%22colorDepth%22%3A0%2C%22websql%22%3A0%2C%22dnd %22%3A0%2C%22ce%22%3A0%2C%22imp%22%3A0%2C%22tz%22% 3A0%2C%22ogg%22%3A0%2C%22dialog%22%3A0%2C%22video% 22%3A0%2C%22audio%22%3A0%2C%22ac%22%3A0%2C%22ances tor%22%3A0%2C%22chrome%22%3A0%2C%22chromewebstore% 22%3A0%2C%22random%22%3A0%2C%22ie%22%3A0%2C%22user data%22%3A0%2C%22srcset%22%3A0%2C%22canvas%22%3A0% 2C%22emoji%22%3A0%2C%22pic%22%3A0%2C%22wc%22%3A0%2 C%22ext%22%3A0%2C%22pop%22%3A0%2C%22href%22%3A0%2C %22devorient%22%3A0%2C%22devmotion%22%3A0%2C%22can vasfp%22%3A0%7D%7D
LR%5FHEIGHT=400
blacklist%5Forder%5Fid=
LR%5FLOCALE=en%5FUS
LR%5FWIDTH=550
LR%5FINTEGRATION=vpaid
failed%5Fcreative%5Fid=
LR%5FPOD%5FSLOTS=1
LR%5FVIEWPORT%5FWIDTH=
LR%5FPLAYER%5FHEIGHT=270
LR%5FFORMAT=video%2Fmp4%3Bvideo%2Fx%2Dflv%3Bapplic ation%2Fx%2Dshockwave%2Dflash%3Bimage%2Fjpeg%3Bima ge%2Fpng%3Bimage%2Fgif
LR%5FPLAYER%5FWIDTH=480
LR%5FWINDOW%5FLOCATION=http%3A%2F%2Fdelivery%2Etec hbrowsing%2Ecom%2Fplayer%2Dmulti%2Ephp%3Fzoneid%3D 471%26w%3D480%26h%3D270%26ver%3Dold%26ref%3Dhttp%2 53A%252F%252Ftechbrowsing%2Ecom%252F%253Ffrom%253D land%26affr%3Ddisplayed%5Fiframe%5Ftbland%26pos%3D right%26af%5Fvideo%3D%252Fcached%5Fimages%252Ffull %252Fvisual%2Dartists%2Dotherworldly%2Dhermes%2Dex hibit%2Eflv%26thumbnail%3D%252Fcached%5Fimages%252 Fthumbnail%252Fvisual%2Dartists%2Dotherworldly%2Dh ermes%2Dexhibit%5F640%5F480%2Ejpg%26v%5Ftitle%3DVI SUAL%2BARTIST%2527S%2B%2527OTHERWORLDLY%2527%2BHER MES%2BEXHIBIT
LR%5FADMAP=in%3A%3A0
LR%5FVIEWPORT%5FHEIGHT=
LR%5FSCENARIO=
LR%5FSLOT%5FINDEX=0
served%5Fconnection%5Fid=
LR%5FSDK=flash
served%5Forder%5Fid=
LR%5FADAPTERS=LR%2CVPAID%2CGIMA%2CGOOG%2CGAFV%2CYU ME%2CTMAC
LR%5FIFRAME=2
LR%5FVIDEO%5FID=ebfb3dd0475cadf436008b110667b7bc
blacklist%5Fconnection%5Fid=
LR%5FWINDOW%5FDEPTH=1
LR%5FTITLE=VISUAL%20ARTIST%27S%20%27OTHERWORLDLY%2 7%20HERMES%20EXHIBIT
LR%5FVIDEO%5FPOSITION=0
LR%5FVIEWABLE%5FRATIO=0
LR%5FCONTENT=6
LR%5FSDK%5FVERSION=2%2E5%2E15
LR%5FADUNIT=in
LR%5FMUTED=0
LR%5FSCHEMA=liverail
LR%5FPLAYER%5FOBJECT%5FID=fla%5Fxml
LR%5FAUTOPLAY=0
LR%5FPOD%5FCURRENT=1
served%5Fcreative%5Fid=
LR%5FWINDOW%5FREFERRER=http%3A%2F%2Ftechbrowsing%2 Ecom%2F%3Ffrom%3Dland
LR%5FADTYPE=3
LR%5FPAGE%5FURL=http%3A%2F%2Ftechbrowsing%2Ecom%2F %3Ffrom%3Dland
LR%5FPUBLISHER%5FID=11230
LR%5FRETRY%5FINDEX=0
========================================
Локальное время:21.05.2016 13:22:46
Время сессии: 00:10:40
Время отчета: 21.05.2016 13:25:36
Процесс: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.7600.16385
Источник: http://ad4.liverail.com/
Тип: HTTP запрос
Размер (байты): 6 487
----------------------------------------
http://ad4.liverail.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
Cookie: -
Accept-Language: en-GB
Accept-Encoding: gzip, deflate
Screen(w:h): 1366:768
Referer: http://scontent.lrcdn.net/outbound-cdn-static/swf/v4/admanager.swf?LR_PUBLISHER_ID=11230&LR_AUTOPLAY=0& LR_MUTED=0&LR_CONTENT=6&LR_TITLE=US G
User input:
POST data:
LR%5FIFRAME=2
LR%5FBROWSER%5FFEATURES=%7B%22ua%22%3A%22Mozilla%2 F4%2E0%20%28compatible%3B%20MSIE%208%2E0%3B%20Wind ows%20NT%206%2E1%3B%20WOW64%3B%20Trident%2F4%2E0%3 B%20SLCC2%3B%20%2ENET%20CLR%202%2E0%2E50727%3B%20% 2ENET%20CLR%203%2E5%2E30729%3B%20%2ENET%20CLR%203% 2E0%2E30729%3B%20Media%20Center%20PC%206%2E0%29%22 %2C%22css%5Fall%22%3Afalse%2C%22cfq%22%3Afalse%2C% 22scope%22%3Afalse%2C%22sticky%22%3Afalse%2C%22scr oll%22%3Afalse%2C%22plugins%22%3A0%2C%22pmode%22%3 Afalse%2C%22colorDepth%22%3A32%2C%22websql%22%3Afa lse%2C%22dnd%22%3Atrue%2C%22ce%22%3Afalse%2C%22imp %22%3Afalse%2C%22tz%22%3A%2D180%2C%22ogg%22%3Afals e%2C%22dialog%22%3Afalse%2C%22video%22%3Afalse%2C% 22audio%22%3Afalse%2C%22chrome%22%3Afalse%2C%22chr omewebstore%22%3Afalse%2C%22random%22%3Afalse%2C%2 2ie%22%3Afalse%2C%22userdata%22%3Afalse%2C%22srcse t%22%3Afalse%2C%22canvas%22%3Afalse%2C%22pic%22%3A false%2C%22wc%22%3Afalse%2C%22ext%22%3Afalse%2C%22 devorient%22%3Afalse%2C%22devmotion%22%3Afalse%2C% 22time%22%3A0%7D
LR%5FSDK=flash
LR%5FPLUGIN%5FBROWSER%5FFEATURES=%7B%22ua%22%3A%22 Mozilla%2F4%2E0%20%28compatible%3B%20MSIE%208%2E0% 3B%20Windows%20NT%206%2E1%3B%20WOW64%3B%20Trident% 2F4%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202%2E0%2E507 27%3B%20%2ENET%20CLR%203%2E5%2E30729%3B%20%2ENET%2 0CLR%203%2E0%2E30729%3B%20Media%20Center%20PC%206% 2E0%29%22%2C%22version%22%3A%224%2E0%20%28compatib le%3B%20MSIE%208%2E0%3B%20Windows%20NT%206%2E1%3B% 20WOW64%3B%20Trident%2F4%2E0%3B%20SLCC2%3B%20%2ENE T%20CLR%202%2E0%2E50727%3B%20%2ENET%20CLR%203%2E5% 2E30729%3B%20%2ENET%20CLR%203%2E0%2E30729%3B%20Med ia%20Center%20PC%206%2E0%29%22%2C%22platform%22%3A %22Win32%22%2C%22isIframe%22%3Atrue%2C%22ref%22%3A %22http%3A%2F%2Fdelivery%2Eanchorfree%2Eus%2Fplaye r%2Dmulti%2Ephp%3Fzoneid%3D503%26w%3D480%26h%3D270 %26autoplay%3Don%26ver%3Dold%26v%5Ftitle%3DUS%2BGI VES%2BGUIDENCE%2BON%2BTRANSGENDER%2BSTUDENTS%26ref %3Dhttp%253A%252F%252Fanchorfree%2Eus%252Fnews%252 Fnews%252F%253Fs%253Dworld%2Dnews%2526pp%253D2%26a ffr%3Ddisplayed%5Fiframe%5Fafuspp2%26af%5Fvideo%3D %252Fcached%5Fimages%252Ffull%252Fus%2Dgives%2Dgui dence%2Don%2Dtransgender%2Dstudents%2Eflv%26thumbn ail%3D%252Fcached%5Fimages%252Fthumbnail%252Fus%2D gives%2Dguidence%2Don%2Dtransgender%2Dstudents%5F6 40%5F480%2Ejpg%22%2C%22url%22%3A%22http%3A%2F%2Fde livery%2Eanchorfree%2Eus%2Fvpaid%5Fplayer%2Ephp%3F af%5Fplayer%5Fad%3D1%26n%3D1463763382%22%2C%22widt h%22%3A1366%2C%22height%22%3A768%2C%22awidth%22%3A 1366%2C%22aheight%22%3A768%2C%22left%22%3A527%2C%2 2top%22%3A525%2C%22css%5Fall%22%3Afalse%2C%22cfq%2 2%3Afalse%2C%22scope%22%3Afalse%2C%22sticky%22%3Af alse%2C%22scroll%22%3Afalse%2C%22plugins%22%3A0%2C %22pmode%22%3Afalse%2C%22colorDepth%22%3A32%2C%22w ebsql%22%3Afalse%2C%22dnd%22%3Atrue%2C%22ce%22%3Af alse%2C%22imp%22%3Afalse%2C%22tz%22%3A%2D180%2C%22 ogg%22%3Afalse%2C%22dialog%22%3Afalse%2C%22video%2 2%3Afalse%2C%22audio%22%3Afalse%2C%22ac%22%3Afalse %2C%22ancestor%22%3A%22%22%2C%22chrome%22%3Afalse% 2C%22chromewebstore%22%3Afalse%2C%22random%22%3Afa lse%2C%22ie%22%3Afalse%2C%22userdata%22%3Afalse%2C %22srcset%22%3Afalse%2C%22canvas%22%3Afalse%2C%22e moji%22%3Afalse%2C%22pic%22%3Afalse%2C%22wc%22%3Af alse%2C%22ext%22%3Afalse%2C%22pop%22%3Afalse%2C%22 href%22%3A%22http%3A%2F%2Fdelivery%2Eanchorfree%2E us%2Fvpaid%5Fplayer%2Ephp%3Faf%5Fplayer%5Fad%3D1%2 6n%3D1463763382%22%2C%22devorient%22%3Afalse%2C%22 devmotion%22%3Afalse%2C%22canvasfp%22%3A0%2C%22tim e%22%3A15%2C%22feature%5Ftimes%22%3A%7B%22ua%22%3A 0%2C%22version%22%3A0%2C%22platform%22%3A0%2C%22is Iframe%22%3A0%2C%22ref%22%3A0%2C%22url%22%3A0%2C%2 2width%22%3A0%2C%22height%22%3A0%2C%22awidth%22%3A 0%2C%22aheight%22%3A0%2C%22left%22%3A0%2C%22top%22 %3A0%2C%22css%5Fall%22%3A0%2C%22cfq%22%3A0%2C%22cs svar%22%3A0%2C%22scope%22%3A0%2C%22sticky%22%3A0%2 C%22scroll%22%3A0%2C%22plugins%22%3A0%2C%22pmode%2 2%3A0%2C%22colorDepth%22%3A0%2C%22websql%22%3A0%2C %22dnd%22%3A0%2C%22ce%22%3A0%2C%22imp%22%3A0%2C%22 tz%22%3A0%2C%22ogg%22%3A0%2C%22dialog%22%3A0%2C%22 video%22%3A0%2C%22audio%22%3A0%2C%22ac%22%3A0%2C%2 2ancestor%22%3A0%2C%22chrome%22%3A0%2C%22chromeweb store%22%3A0%2C%22random%22%3A0%2C%22ie%22%3A0%2C% 22userdata%22%3A0%2C%22srcset%22%3A0%2C%22canvas%2 2%3A0%2C%22emoji%22%3A0%2C%22pic%22%3A0%2C%22wc%22 %3A0%2C%22ext%22%3A0%2C%22pop%22%3A0%2C%22href%22% 3A0%2C%22devorient%22%3A0%2C%22devmotion%22%3A0%2C %22canvasfp%22%3A0%7D%7D
LR%5FADAPTERS=LR%2CVPAID%2CGIMA%2CGOOG%2CGAFV%2CYU ME%2CTMAC
LR%5FSCENARIO=
LR%5FADUNIT=in
LR%5FTITLE=US%20GIVES%20GUIDENCE%20ON%20TRANSGENDE R%20STUDENTS
LR%5FINTEGRATION=vpaid
LR%5FLOCALE=en%5FUS
LR%5FADMAP=in%3A%3A0
failed%5Fcreative%5Fid=
LR%5FWIDTH=550
blacklist%5Fconnection%5Fid=
LR%5FSDK%5FVERSION=2%2E5%2E15
LR%5FHEIGHT=400
LR%5FRETRY%5FINDEX=0
blacklist%5Forder%5Fid=
LR%5FVIDEO%5FID=222788166e1300396df79e8423d313e8
LR%5FADTYPE=3
LR%5FVIEWABLE=0
LR%5FFORMAT=video%2Fmp4%3Bvideo%2Fx%2Dflv%3Bapplic ation%2Fx%2Dshockwave%2Dflash%3Bimage%2Fjpeg%3Bima ge%2Fpng%3Bimage%2Fgif
LR%5FVIEWPORT%5FWIDTH=
LR%5FVIEWPORT%5FHEIGHT=
LR%5FPLAYER%5FOBJECT%5FID=fla%5Fxml
LR%5FPOD%5FSLOTS=1
LR%5FVIEWABLE%5FRATIO=0
LR%5FPLAYER%5FWIDTH=480
LR%5FVIDEO%5FPOSITION=0
LR%5FWINDOW%5FREFERRER=http%3A%2F%2Fanchorfree%2Eu s%2Fnews%2F%3Fs%3Dworld%2Dnews%26pp%3D2
LR%5FPAGE%5FURL=http%3A%2F%2Fanchorfree%2Eus%2Fnew s%2F%3Fs%3Dworld%2Dnews%26pp%3D2
LR%5FPUBLISHER%5FID=11230
LR%5FWINDOW%5FLOCATION=http%3A%2F%2Fdelivery%2Eanc horfree%2Eus%2Fplayer%2Dmulti%2Ephp%3Fzoneid%3D503 %26w%3D480%26h%3D270%26autoplay%3Don%26ver%3Dold%2 6v%5Ftitle%3DUS%2BGIVES%2BGUIDENCE%2BON%2BTRANSGEN DER%2BSTUDENTS%26ref%3Dhttp%253A%252F%252Fanchorfr ee%2Eus%252Fnews%252Fnews%252F%253Fs%253Dworld%2Dn ews%2526pp%253D2%26affr%3Ddisplayed%5Fiframe%5Fafu spp2%26af%5Fvideo%3D%252Fcached%5Fimages%252Ffull% 252Fus%2Dgives%2Dguidence%2Don%2Dtransgender%2Dstu dents%2Eflv%26thumbnail%3D%252Fcached%5Fimages%252 Fthumbnail%252Fus%2Dgives%2Dguidence%2Don%2Dtransg ender%2Dstudents%5F640%5F480%2Ejpg
served%5Forder%5Fid=
LR%5FWINDOW%5FDEPTH=1
LR%5FSCHEMA=liverail
LR%5FAUTOPLAY=0
LR%5FPLAYER%5FHEIGHT=270
served%5Fconnection%5Fid=
LR%5FMUTED=0
LR%5FPOD%5FCURRENT=1
LR%5FCONTENT=6
LR%5FSLOT%5FINDEX=0
served%5Fcreative%5Fid=
========================================
Локальное время:21.05.2016 13:23:07
Время сессии: 00:11:01
Время отчета: 21.05.2016 13:25:38
Процесс: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.7600.16385
Источник: http://aws-ping.crowdscience.com/2/select_for_survey?adid=241719&domain=682AjKtZmjX&t imer=1&yume_load_timeout=30&siteid=YuMe&yume_reque st_timeout=20&cid=&surveySlot=preAd&yume_survey_pr ovider=yume&yume_interaction_timeout=60&show=1&yvb sv=7.0.7.3&childFrame=http%3A%2F%2Fdelivery.anchor free.us%2Fvpaid_player.php%3Faf_player_ad%3D1%26n% 3D1463763382
Тип: HTTP запрос
Размер (байты): 2 760
----------------------------------------
http://aws-ping.crowdscience.com/2/select_for_survey?adid=241719&domain=682AjKtZmjX&t imer=1&yume_load_timeout=30&siteid=YuMe&yume_reque st_timeout=20&cid=&surveySlot=preAd&yume_survey_pr ovider=yume&yume_interaction_timeout=60&show=1&yvb sv=7.0.7.3&childFrame=http%3A%2F%2Fdelivery.anchor free.us%2Fvpaid_player.php%3Faf_player_ad%3D1%26n% 3D1463763382
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
Cookie: -
Accept-Language: en-GB
Accept-Encoding: gzip, deflate
Screen(w:h): 1366:768
Referer: http://plg1.yumenetworks.com/[[IMPORT]]/pl.yumenetworks.com/include/advertiser/component_as3.swf
User input:
POST data:
{"imp":[{"displaymanagerver":"4.0.7.20","secure":0,"video":{"linearity":1,"companiontype":[1,2,3],"api":[1,2],"h":400,"protocols":[2,5],"startdelay":0,"w":550,"delivery":[1,2],"mimes":["video/x-flv","video/mp4","application/x-shockwave-flash"]},"displaymanager":"yume"}],"ext":{"sdk":{"version":"4.0.7.20","domain_identifier":"682AjKtZmjX","protocol_version":"2.0","ypjv":"1.1","playlist_version":"v2","sdk_url":"http%3A%2F%2Fplg1.yumenetworks.com%2Fyvp%2F20%2Fvp aid%2Fcr%2F","client_data":{"local":{}},"survey":{"enabled":"true","type":"swf"}},"player":{"window_depth":1,"window_width":null,"height":400,"window_height":null,"ypt":"none","ytp":"0,0,480,570,0,0,480,570","window_referrer_url":"http://delivery.anchorfree.us/player-multi.php?zoneid=503
w=480
h=270
autoplay=on
ver=old
v_title=US GIVES GUIDENCE ON TRANSGENDER STUDENTS
ref=http%3A%2F%2Fanchorfree.us%2Fnews%2Fnews%2F%3F s%3Dworld-news%26pp%3D2
affr=displayed_iframe_afuspp2
af_video=%2Fcached_images%2Ffull%2Fus-gives-guidence-on-transgender-students.flv
thumbnail=%2Fcached_images%2Fthumbnail%2Fus-gives-guidence-on-transgender-students_640_480.jpg","is_debug":false,"volume":100,"width":550,"mouse_inside_frame":"0,0","window_active":true}},"device":{"geo":{"ext":{"local_date":"05/21/2016","local_time":"16:23:01 0300"}},"os":"Windows 7","ext":{"yume_user_agent":"Online;Desktop;NA;NA;NA;NA;null;4.0.7.20;Microsoft Internet Explorer","hardware":{"display":{"screen_dpi":72,"screen_width":1366,"screen_height":768,"viewport":"NaN,0,480,270,480,270,0,0"}},"embedded_in":"http%3A%2F%2Fanchorfree.us%2Fnews%2F%3Fs%3Dworld-news%26pp%3D2","child_frame":"http%3A%2F%2Fdelivery.anchorfree.us%2Fvpaid_player .php%3Faf_player_ad%3D1%26n%3D1463763382","system_language":"en","pixel_aspect_ratio":"1","preferred_languages":["en"],"embed_auto_detect":false,"browser":{"browser_version":"8","browser_height":550,"browser_vendor":"Microsoft Internet Explorer","cookie_enabled":true,"browser_language":null,"browser_width":480}},"dnt":0,"flashver":"WIN 22,0,0,158","js":1}}
========================================
Локальное время:21.05.2016 13:40:14
Время сессии: 00:28:08
Время отчета: 21.05.2016 13:40:41
Процесс: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.7600.16385
Источник: http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Fwww.scoreland.com%2Fbig-boob-photos%2FKaty%2F20553%2F&callback=atajsshctcbcwzPe
Тип: HTTP запрос
Размер (байты): 540
----------------------------------------
http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Fwww.scoreland.com%2Fbig-boob-photos%2FKaty%2F20553%2F&callback=atajsshctcbcwzPe
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1366:768
Referer: http://www.scoreland.com/big-boob-photos/Katy/20553/?nats=NTAwOTg0LjQuMi4yLjEuNzAwNTI2NS4wLjAuMA
User input: Ph
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 13:45:04
Время сессии: 00:32:58
Время отчета: 21.05.2016 13:45:12
Процесс: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.7600.16385
Источник: http://twitter.com/statuses/user_timeline/lanasbigboobs.json?callback=twitterCallback2&count =3
Тип: HTTP запрос
Размер (байты): 433
----------------------------------------
http://twitter.com/statuses/user_timeline/lanasbigboobs.json?callback=twitterCallback2&count =3
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1366:768
Referer: http://www.lanasbigboobs.com/main.php
User input: Ph
POST data:
*EMPTY*
========================================
Bot ID: IVAN-PC_1CB98D876522DF69
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven x64, SP 1
Язык ОС: 3082
Локальное время:15.05.2016 23:06:20
GMT: +0:00
Время сессии: 00:22:02
Время отчета: 21.05.2016 20:31:52
Страна: ??
IPv4: 200.104.27.2
Процесс: C:\windows\SysWOW64\explorer.exe
Информация о процессе:Microsoft Corporation | Sistema operativo Microsoft® Windows® | 6.1.7601.19135
Источник: https://178.183.120.96/KrM8EGZBEyuBn8YY.php
Тип: HTTPS запрос
Размер (байты): 384
----------------------------------------
https://178.183.120.96/KrM8EGZBEyuBn8YY.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input:
POST data:
jkkpfwiyrxa=zpH cYplWZpeyxqs6ZpLs1XcacWbC760nBriNlfHfWHZXVsDNtkJ2G SBfvDMMN OaPbIJmY2yeD0XJgZKVuycruLSPPPjQiMi/pquqy9Kk9DpY Szakn/trxqTpbXhf75ARlIyCBTa2lAr6cePVwJw2qNM 7AGASiU0aPbPzk1QZDX/fWzSyy5KazXDmHqgP511HGJj7QbBuk74=
========================================
Bot ID: JA-E06582C48095_7BF1A2E1D5E32D83
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 3082
Локальное время:19.05.2016 17:29:24
GMT: +2:00
Время сессии: 00:21:53
Время отчета: 21.05.2016 17:38:01
Страна: ??
IPv4: 94.76.160.246
Процесс: C:\Archivos de programa\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://ad4.liverail.com/?compressed
Тип: HTTP запрос
Размер (байты): 1 142
----------------------------------------
http://ad4.liverail.com/?compressed
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS100287; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)
Cookie: -
Accept-Language: es-ES
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://scontent.lrcdn.net/outbound-cdn-static/swf/v4/admanager.swf?LR_PUBLISHER_ID=51330&LR_AUTOPLAY=0& LR_VIDEO_ID=1992979241&LR_VIDEO_POSIT
User input: comic fi<<life
POST data:
xUi=Wca:??f?U?<a?b,6?'??S›uei?$??»EUiUA?? U`uMOIHE®u?Y^?a/e/~wO~%YQdLcO?I(ea7Aa?i¦c¶?aF®u?}?u%]?u[o??G;geG›o*oi›\?
W ?‰•obi? ? U??FAzoM¬~ U†??i?Uµ¬¦4cO? U
?AU7No?U?q%hgXeo?[.*|°ow{2 V~°UA?aaAYE >e8iZ
‰•’u?C?U–A4o?µ7›i??O_^7?e~“kU?O Yo z?¶Ei{?k!IG??M?ql%?oOYMuO“E•j©_‚?? 8?|K/?¶oA°aA?Ax?U5 ¤¶_A?† IZ0ee o(C ?€i*21^?d?”bCsU???µW?®©?„_?d°…V‡ ¶¶U„Adrb?EUu ^ivI?v»??;u:2B
========================================
Локальное время:19.05.2016 17:30:38
Время сессии: 00:23:06
Время отчета: 21.05.2016 17:38:02
Процесс: C:\Archivos de programa\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://ad4.liverail.com/
Тип: HTTP запрос
Размер (байты): 5 571
----------------------------------------
http://ad4.liverail.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS100287; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)
Cookie: -
Accept-Language: es-ES
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://scontent.lrcdn.net/outbound-cdn-static/swf/v4/admanager.swf?LR_PUBLISHER_ID=51330&LR_AUTOPLAY=0& LR_VIDEO_ID=661284812&LR_VIDEO_POSITI
User input: comic fi<<life
POST data:
LR%5FMUTED=0
LR%5FAUTOPLAY=0
LR%5FSLOT%5FINDEX=0
LR%5FFORMAT=video%2Fmp4%3Bvideo%2Fx%2Dflv%3Bapplic ation%2Fx%2Dshockwave%2Dflash%3Bimage%2Fjpeg%3Bima ge%2Fpng%3Bimage%2Fgif
LR%5FRETRY%5FINDEX=0
LR%5FVIEWABLE%5FRATIO=0%2E9672131147540984
LR%5FINTEGRATION=vpaid
LR%5FADTYPE=3
LR%5FWINDOW%5FREFERRER=http%3A%2F%2Fcomic%2Dlife%2 Esoftonic%2Ecom%2F
LR%5FADMAP=in%3A%3A0
LR%5FPLAYER%5FWIDTH=650
LR%5FSDK%5FVERSION=2%2E5%2E15
LR%5FCOMPANIONS=100%3A90%3Afake%5Fdiv1%7C220%3A90% 3Afake%5Fdiv2
LR%5FWINDOW%5FLOCATION=http%3A%2F%2Fcomic%2Dlife%2 Esoftonic%2Ecom%2Fdescargar%23downloading
LR%5FLOCALE=es
LR%5FADAPTERS=LR%2CVPAID%2CGIMA%2CGOOG%2CGAFV%2CYU ME%2CTMAC
LR%5FWINDOW%5FDEPTH=0
LR%5FADUNIT=in
LR%5FPLAYER%5FHEIGHT=366
LR%5FPOD%5FSLOTS=1
LR%5FVIEWABLE=1
LR%5FVIDEO%5FID=661284812
LR%5FHEIGHT=364
LR%5FPLUGIN%5FBROWSER%5FFEATURES=%7B%22ua%22%3A%22 Mozilla%2F4%2E0%20%28compatible%3B%20MSIE%208%2E0% 3B%20Windows%20NT%205%2E1%3B%20Trident%2F4%2E0%3B% 20BTRS100287%3B%20GTB7%2E5%3B%20%2ENET%20CLR%202%2 E0%2E50727%3B%20%2ENET4%2E0C%3B%20%2ENET%20CLR%203 %2E0%2E4506%2E2152%3B%20%2ENET%20CLR%203%2E5%2E307 29%3B%20InfoPath%2E2%29%22%2C%22version%22%3A%224% 2E0%20%28compatible%3B%20MSIE%208%2E0%3B%20Windows %20NT%205%2E1%3B%20Trident%2F4%2E0%3B%20BTRS100287 %3B%20GTB7%2E5%3B%20%2ENET%20CLR%202%2E0%2E50727%3 B%20%2ENET4%2E0C%3B%20%2ENET%20CLR%203%2E0%2E4506% 2E2152%3B%20%2ENET%20CLR%203%2E5%2E30729%3B%20Info Path%2E2%29%22%2C%22platform%22%3A%22Win32%22%2C%2 2isIframe%22%3Atrue%2C%22ref%22%3A%22http%3A%2F%2F comic%2Dlife%2Esoftonic%2Ecom%2F%22%2C%22url%22%3A %22http%3A%2F%2Fcomic%2Dlife%2Esoftonic%2Ecom%2Fde scargar%23downloading%22%2C%22width%22%3A1143%2C%2 2height%22%3A857%2C%22awidth%22%3A1143%2C%22aheigh t%22%3A857%2C%22top%22%3A155%2C%22css%5Fall%22%3Af alse%2C%22cfq%22%3Afalse%2C%22scope%22%3Afalse%2C% 22sticky%22%3Afalse%2C%22scroll%22%3Afalse%2C%22pl ugins%22%3A0%2C%22pmode%22%3Afalse%2C%22colorDepth %22%3A32%2C%22websql%22%3Afalse%2C%22dnd%22%3Atrue %2C%22ce%22%3Afalse%2C%22imp%22%3Afalse%2C%22tz%22 %3A%2D120%2C%22ogg%22%3Afalse%2C%22dialog%22%3Afal se%2C%22video%22%3Afalse%2C%22audio%22%3Afalse%2C% 22ac%22%3Afalse%2C%22ancestor%22%3A%22%22%2C%22chr ome%22%3Afalse%2C%22chromewebstore%22%3Afalse%2C%2 2random%22%3Afalse%2C%22ie%22%3Afalse%2C%22userdat a%22%3Afalse%2C%22srcset%22%3Afalse%2C%22canvas%22 %3Afalse%2C%22emoji%22%3Afalse%2C%22pic%22%3Afalse %2C%22wc%22%3Afalse%2C%22ext%22%3Afalse%2C%22pop%2 2%3Afalse%2C%22href%22%3A%22http%3A%2F%2Fcomic%2Dl ife%2Esoftonic%2Ecom%2Fdescargar%23downloading%22% 2C%22devorient%22%3Afalse%2C%22devmotion%22%3Afals e%2C%22canvasfp%22%3A0%2C%22time%22%3A47%2C%22feat ure%5Ftimes%22%3A%7B%22ua%22%3A0%2C%22version%22%3 A0%2C%22platform%22%3A0%2C%22isIframe%22%3A0%2C%22 ref%22%3A0%2C%22url%22%3A0%2C%22width%22%3A0%2C%22 height%22%3A0%2C%22awidth%22%3A0%2C%22aheight%22%3 A0%2C%22left%22%3A0%2C%22top%22%3A0%2C%22css%5Fall %22%3A0%2C%22cfq%22%3A0%2C%22cssvar%22%3A0%2C%22sc ope%22%3A0%2C%22sticky%22%3A0%2C%22scroll%22%3A0%2 C%22plugins%22%3A0%2C%22pmode%22%3A0%2C%22colorDep th%22%3A0%2C%22websql%22%3A0%2C%22dnd%22%3A0%2C%22 ce%22%3A0%2C%22imp%22%3A0%2C%22tz%22%3A0%2C%22ogg% 22%3A0%2C%22dialog%22%3A0%2C%22video%22%3A15%2C%22 audio%22%3A0%2C%22ac%22%3A0%2C%22ancestor%22%3A0%2 C%22chrome%22%3A0%2C%22chromewebstore%22%3A0%2C%22 random%22%3A0%2C%22ie%22%3A0%2C%22userdata%22%3A0% 2C%22srcset%22%3A0%2C%22canvas%22%3A0%2C%22emoji%2 2%3A0%2C%22pic%22%3A0%2C%22wc%22%3A0%2C%22ext%22%3 A16%2C%22pop%22%3A0%2C%22href%22%3A0%2C%22devorien t%22%3A0%2C%22devmotion%22%3A0%2C%22canvasfp%22%3A 0%7D%7D
failed%5Fcreative%5Fid=
LR%5FVIEWPORT%5FWIDTH=1120
LR%5FVIDEO%5FPOSITION=0
LR%5FVIEWPORT%5FHEIGHT=698
LR%5FWIDTH=647
LR%5FPOD%5FCURRENT=1
LR%5FPUBLISHER%5FID=51330
LR%5FIFRAME=0
LR%5FPLAYER%5FOBJECT%5FID=bcExperienceObj0
served%5Fconnection%5Fid=
LR%5FTAGS=POSTDOWNLOAD%2Cpreroll%2Cab%2D
served%5Forder%5Fid=
LR%5FBROWSER%5FFEATURES=%7B%22ua%22%3A%22Mozilla%2 F4%2E0%20%28compatible%3B%20MSIE%208%2E0%3B%20Wind ows%20NT%205%2E1%3B%20Trident%2F4%2E0%3B%20BTRS100 287%3B%20GTB7%2E5%3B%20%2ENET%20CLR%202%2E0%2E5072 7%3B%20%2ENET4%2E0C%3B%20%2ENET%20CLR%203%2E0%2E45 06%2E2152%3B%20%2ENET%20CLR%203%2E5%2E30729%3B%20I nfoPath%2E2%29%22%2C%22css%5Fall%22%3Afalse%2C%22c fq%22%3Afalse%2C%22scope%22%3Afalse%2C%22sticky%22 %3Afalse%2C%22scroll%22%3Afalse%2C%22plugins%22%3A 0%2C%22pmode%22%3Afalse%2C%22colorDepth%22%3A32%2C %22websql%22%3Afalse%2C%22dnd%22%3Atrue%2C%22ce%22 %3Afalse%2C%22imp%22%3Afalse%2C%22tz%22%3A%2D120%2 C%22ogg%22%3Afalse%2C%22dialog%22%3Afalse%2C%22vid eo%22%3Afalse%2C%22audio%22%3Afalse%2C%22chrome%22 %3Afalse%2C%22chromewebstore%22%3Afalse%2C%22rando m%22%3Afalse%2C%22ie%22%3Afalse%2C%22userdata%22%3 Afalse%2C%22srcset%22%3Afalse%2C%22canvas%22%3Afal se%2C%22pic%22%3Afalse%2C%22wc%22%3Afalse%2C%22ext %22%3Afalse%2C%22devorient%22%3Afalse%2C%22devmoti on%22%3Afalse%2C%22time%22%3A31%7D
LR%5FPAGE%5FURL=http%3A%2F%2Fcomic%2Dlife%2Esofton ic%2Ecom%2Fdescargar%23downloading
LR%5FSDK=flash
LR%5FSCENARIO=
LR%5FTITLE=http%3A%2F%2Fcomic%2Dlife%2Esoftonic%2E com%2Fdescargar
blacklist%5Fconnection%5Fid=
LR%5FSCHEMA=liverail
served%5Fcreative%5Fid=
LR%5FVERTICALS=ES
blacklist%5Forder%5Fid=
========================================
Локальное время:19.05.2016 17:30:39
Время сессии: 00:23:08
Время отчета: 21.05.2016 17:38:03
Процесс: C:\Archivos de programa\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://ad4.liverail.com/?compressed
Тип: HTTP запрос
Размер (байты): 1 519
----------------------------------------
http://ad4.liverail.com/?compressed
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS100287; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)
Cookie: -
Accept-Language: es-ES
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://scontent.lrcdn.net/outbound-cdn-static/swf/v4/admanager.swf?LR_PUBLISHER_ID=51330&LR_AUTOPLAY=0& LR_VIDEO_ID=661284812&LR_VIDEO_POSITI
User input: comic fi<<life
POST data:
xUi Ube?ik¦II?o?Z ?ShEUo–•?a9„ye?$; UI9i?™;™{OI ??$K?,IA� �§H?«Eu?R’?P?’?o?E®fNTQJAa<S®?-~?r)?¬0KN?<?,?O¤«(‚ Sdi?sL3•?O5yOj–? ojµ_oP?Wnw®?Pa7YdWo?
uJ s?du?e¶aUOlE?mAQlM¶TI•dOn®‚PNJ u
IbW??!U§™?$IsqeG8 eAue?OO?oYa jevo«i¦a S?n—Nx>u?U?P †_H?giUI†uAzu?TLuAj°e R*AN?V??aEa|ES?A«L Ey?
UeyRy ?OzY‹ai u u?#e3uZ*oE?a?¬a )*<K?p^ue,Yz?—®?•Wx5†¬EOu [?koYu?O~?‚§O?—i¶ ` E•uu5oae/lh?eI§0?p A·C!V^s?Ou ?I;
µ?IY*AM«=^?Wo:$sV°¬Bm*-A«IeCi®}??=aG«Ymo0ct!?j?gea$›7Z??YU3{e/OE?C-eqZY,Z…u?AS6cIY‹T??— I‡UZoMCS?J»Oa[m?P“2E;€Bn’OobZ]{…”d?Fs?mko|ElG?I?a,<adaoO?Uaa8Ad*A??x·� �®o?-?U# UI[/y?Z†liZOeS|Y,c«?;S€`'?¤Ap<oiax%@('i8aTeodE OEu
========================================
Bot ID: KIOT37-PC_E532648AE1EA9F0F
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven, SP 1
Язык ОС: 1033
Локальное время:19.05.2016 18:34:04
GMT: +0:00
Время сессии: 00:39:11
Время отчета: 21.05.2016 08:00:55
Страна: ??
IPv4: 116.107.35.129
Процесс: C:\Windows\explorer.exe
Информация о процессе:Microsoft Corporation | Microsoft® Windows® Operating System | 6.1.7600.16385
Источник: https://115.78.239.17/sf9Cia4gXkrQnIbMeu5EgtjF.php
Тип: HTTPS запрос
Размер (байты): 392
----------------------------------------
https://115.78.239.17/sf9Cia4gXkrQnIbMeu5EgtjF.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1680:1050
Referer: -
User input:
POST data:
hiqhtde=Zzx5ne4PPmZ03q3h9wEI3HICCxdMmxGdQQyBS nAPYubSl5V4VFT0itNK0MzcCKg86zRrasp5ABaJ6hUgUGmS7F5 1XCVhs97i4tLxVFAkwKrgqGqG1WMpKVfONa2hKG131ACDy6sUU x9FjgpF73yUmnvJGy6XTJURGAIe4BdQ8Cmp8r2A A0TT5uyTOgvAvbHG6eWnD/oaOT6YwteA==
========================================
Bot ID: KKDV2-20160406P_1F3D59E96522DF69
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven x64, SP 1
Язык ОС: 1033
Локальное время:20.05.2016 02:46:05
GMT: +0:00
Время сессии: 00:01:39
Время отчета: 21.05.2016 05:33:24
Страна: ??
IPv4: 180.180.107.98
Процесс: C:\ProgramData\xuuizbc.exe
Информация о процессе: | |
Источник: http://5.45.72.34/cmd.php
Тип: HTTP запрос
Размер (байты): 158
----------------------------------------
http://5.45.72.34/cmd.php
User-Agent: -
Cookie: -
Accept-Language: th-TH
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input:
POST data:
status=3
========================================
Bot ID: KURT-464AB74794_7875768F5964005E
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1030
Локальное время:20.05.2016 07:52:11
GMT: +2:00
Время сессии: 00:27:31
Время отчета: 21.05.2016 05:51:28
Страна: ??
IPv4: 185.37.87.79
Процесс: C:\Programmer\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Fhellporno.com%2Fvideos%2Ftw o-young-babes-are-fucking-like-perverted-cuties%2F&callback=atajsshctcbmjKnp
Тип: HTTP запрос
Размер (байты): 571
----------------------------------------
http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Fhellporno.com%2Fvideos%2Ftw o-young-babes-are-fucking-like-perverted-cuties%2F&callback=atajsshctcbmjKnp
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET4.0C; .NET4.0E)
Cookie: -
Accept-Language: da
Accept-Encoding: gzip, deflate
Screen(w:h): 1744:1028
Referer: http://hellporno.com/videos/two-young-babes-are-fucking-like-perverted-cuties/?promoid=1292
User input:
POST data:
*EMPTY*
========================================
Bot ID: LAMCO2_7875768F4ECA6F45
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1033
Локальное время:13.08.2004 21:37:04
GMT: -4:00
Время сессии: 119:18:32
Время отчета: 21.05.2016 17:57:04
Страна: ??
IPv4: 174.104.145.15
Процесс: C:\Program Files\W3i\InstallIQUpdater\InstallIQUpdater.exe
Информация о процессе:W3i, LLC | InstallIQ Updater | 1.4.2.0
Источник: http://dl.installiq.com/API/IQU/softwareinfo.aspx
Тип: HTTP запрос
Размер (байты): 261
----------------------------------------
http://dl.installiq.com/API/IQU/softwareinfo.aspx
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1024:768
Referer: -
User input:
POST data:
software=e7b100d8-98a5-42aa-830f-16d6bd5351f1,1062$2bd9da48-937e-4b57-8f58-b7114345e9ed,345
========================================
Bot ID: LAPTOP_7BF1A2E13C6453BE
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1033
Локальное время:20.05.2016 20:51:38
GMT: -7:00
Время сессии: 19:32:09
Время отчета: 21.05.2016 03:51:58
Страна: ??
IPv4: 75.106.212.17
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://search2.inbox.com/setup.cgi
Тип: HTTP запрос
Размер (байты): 538
----------------------------------------
http://search2.inbox.com/setup.cgi
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET CLR 2.0.50727)
Cookie: -
Accept-Language: en-us
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer:
User input: cairntimber
POST data:http://search2.inbox.com/homepage.aspx?tbid=82535&iwk=263&lng=en&rt=1
pws=cairntimber
todo=guest_login
this_file=guest_login.html
next_file=guest_login.html
language=en
message=
passwd=Y2Fpcm50aW1iZXI%3D
========================================
Bot ID: MINZIN-PC_775A658DC9E4CEBC
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven
Язык ОС: 1033
Локальное время:19.05.2016 05:49:18
GMT: +0:00
Время сессии: 04:29:40
Время отчета: 21.05.2016 16:41:26
Страна: ??
IPv4: 118.71.119.18
Процесс: C:\Users\MINZIN~1\AppData\Local\Temp\B01C.tmp.exe
Информация о процессе: | |
Источник: http://sil5.com/adm777/g.php
Тип: HTTP запрос
Размер (байты): 154
----------------------------------------
http://sil5.com/adm777/g.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input:
POST data:
get=3
========================================
Локальное время:19.05.2016 05:49:34
Время сессии: 04:29:56
Время отчета: 21.05.2016 16:41:28
Процесс: C:\ProgramData\sinoglvz.exe
Информация о процессе: | |
Источник: http://5.45.72.34/cmd.php
Тип: HTTP запрос
Размер (байты): 158
----------------------------------------
http://5.45.72.34/cmd.php
User-Agent: -
Cookie: -
Accept-Language: vi-VN
Accept-Encoding: -
Screen(w:h): 1366:768
Referer: -
User input:
POST data:
status=3
========================================
Bot ID: NOVIN_PENDAR_E532648A6C89D7FC
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven, SP 1
Язык ОС: 1033
Локальное время:11.05.2016 22:11:24
GMT: +0:00
Время сессии: 00:30:55
Время отчета: 21.05.2016 04:41:43
Страна: ??
IPv4: 37.254.118.176
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 9.00.8112.16421
Источник: https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=1197793445&c7=https%3A%2F%2Fu k.news.yahoo.com%2Fgirl-suffers-selfie-shame-accidentally-105455492.html&c14=-1&ns_c=UTF-8&ns__t=1463004684092
Тип: HTTPS запрос
Размер (байты): 537
----------------------------------------
https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=1197793445&c7=https%3A%2F%2Fu k.news.yahoo.com%2Fgirl-suffers-selfie-shame-accidentally-105455492.html&c14=-1&ns_c=UTF-8&ns__t=1463004684092
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Cookie: UID=18F80a239222164357f76031463645537; UIDR=1463645537; CP3=1
Accept-Language: fa-IR
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: https://uk.news.yahoo.com/girl-suffers-selfie-shame-accidentally-105455492.html
User input:
POST data:
*EMPTY*
========================================
Локальное время:11.05.2016 22:11:32
Время сессии: 00:31:03
Время отчета: 21.05.2016 04:41:44
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 9.00.8112.16421
Источник: https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=1197793445&c7=https%3A%2F%2Fu k.news.yahoo.com%2Fgirl-suffers-selfie-shame-accidentally-105455492.html&c14=-1&ns_c=UTF-8&ns__t=1463004692767
Тип: HTTPS запрос
Размер (байты): 537
----------------------------------------
https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=1197793445&c7=https%3A%2F%2Fu k.news.yahoo.com%2Fgirl-suffers-selfie-shame-accidentally-105455492.html&c14=-1&ns_c=UTF-8&ns__t=1463004692767
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Cookie: UID=18F80a239222164357f76031463645537; UIDR=1463645537; CP3=1
Accept-Language: fa-IR
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: https://uk.news.yahoo.com/girl-suffers-selfie-shame-accidentally-105455492.html
User input:
POST data:
*EMPTY*
========================================
Локальное время:11.05.2016 22:11:41
Время сессии: 00:31:12
Время отчета: 21.05.2016 04:41:45
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 9.00.8112.16421
Источник: https://s.yimg.com/uu/api/res/1.2/66RwmPqVSFdgKBRQoSAH7Q--/Zmk9c3RyaW07aD0xMDA7cHlvZmY9MDt3PTE3ODtzbT0xO2FwcG lkPXl0YWNoeW9u/http://media.zenfs.com/en/homerun/newsroom.news.yahoo.com.uk/83b061eb1316a27dd3d7aeab3d6fdbca
Тип: HTTPS запрос
Размер (байты): 501
----------------------------------------
https://s.yimg.com/uu/api/res/1.2/66RwmPqVSFdgKBRQoSAH7Q--/Zmk9c3RyaW07aD0xMDA7cHlvZmY9MDt3PTE3ODtzbT0xO2FwcG lkPXl0YWNoeW9u/http://media.zenfs.com/en/homerun/newsroom.news.yahoo.com.uk/83b061eb1316a27dd3d7aeab3d6fdbca
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Cookie: -
Accept-Language: fa-IR
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: https://uk.news.yahoo.com/girl-suffers-selfie-shame-accidentally-105455492.html
User input:
POST data:
*EMPTY*
========================================
Локальное время:11.05.2016 22:11:54
Время сессии: 00:31:26
Время отчета: 21.05.2016 04:41:47
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 9.00.8112.16421
Источник: https://s.yimg.com/ny/api/res/1.2/MZixseLTu8qhTfr4__63uA--/YXBwaWQ9aGlnaGxhbmRlcjtoPTMxMjt3PTYwMDtxPTc1O2ZpPW ZpbGw7cHlvZmY9MzA-/https://s.yimg.com/uu/api/res/1.2/fR7E79oJMK9Ztk1ztrtcVQ--/dz01NDA7aD0zNDI7YXBwaWQ9eXRhY2h5b24-/http://media.zenfs.com/en-GB/homerun/newsroom.news.yahoo.com.uk/890b06a8b623a06525e9f3b1d1aaf7cd
Тип: HTTPS запрос
Размер (байты): 604
----------------------------------------
https://s.yimg.com/ny/api/res/1.2/MZixseLTu8qhTfr4__63uA--/YXBwaWQ9aGlnaGxhbmRlcjtoPTMxMjt3PTYwMDtxPTc1O2ZpPW ZpbGw7cHlvZmY9MzA-/https://s.yimg.com/uu/api/res/1.2/fR7E79oJMK9Ztk1ztrtcVQ--/dz01NDA7aD0zNDI7YXBwaWQ9eXRhY2h5b24-/http://media.zenfs.com/en-GB/homerun/newsroom.news.yahoo.com.uk/890b06a8b623a06525e9f3b1d1aaf7cd
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Cookie: -
Accept-Language: fa-IR
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: https://uk.news.yahoo.com/girl-suffers-selfie-shame-accidentally-105455492.html
User input:
POST data:
*EMPTY*
========================================
Локальное время:11.05.2016 22:11:41
Время сессии: 00:31:12
Время отчета: 21.05.2016 04:41:47
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 9.00.8112.16421
Источник: https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=1197793445&c7=https%3A%2F%2Fu k.news.yahoo.com%2Fgirl-suffers-selfie-shame-accidentally-105455492.html&c14=-1&ns_c=UTF-8&ns__t=1463004701371
Тип: HTTPS запрос
Размер (байты): 537
----------------------------------------
https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=1197793445&c7=https%3A%2F%2Fu k.news.yahoo.com%2Fgirl-suffers-selfie-shame-accidentally-105455492.html&c14=-1&ns_c=UTF-8&ns__t=1463004701371
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Cookie: UID=18F80a239222164357f76031463645537; UIDR=1463645537; CP3=1
Accept-Language: fa-IR
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: https://uk.news.yahoo.com/girl-suffers-selfie-shame-accidentally-105455492.html
User input:
POST data:
*EMPTY*
========================================
Локальное время:11.05.2016 22:20:11
Время сессии: 00:39:42
Время отчета: 21.05.2016 04:41:48
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 9.00.8112.16421
Источник: http://r.skimresources.com/api/?callback=skimlinksApplyHandlers&data=%7B%22pubcod e%22%3A%2255199X1529169%22%2C%22domains%22%3A%5B%2 2facebook.com%22%2C%22twitter.com%22%2C%22uk.pinte rest.com%22%2C%22instagram.com%22%2C%22images2.new scred.com%22%2C%22images4.newscred.com%22%2C%22ima ges1.newscred.com%22%2C%22images3.newscred.com%22% 2C%22vip.wordpress.com%22%2C%22youronlinechoices.c om%22%5D%2C%22page%22%3A%22http%3A%2F%2Fmetro.co.u k%2F2015%2F04%2F16%2Fhow-to-have-sex-according-to-stock-pictures-5012785%2F%22%7D
Тип: HTTP запрос
Размер (байты): 882
----------------------------------------
http://r.skimresources.com/api/?callback=skimlinksApplyHandlers&data=%7B%22pubcod e%22%3A%2255199X1529169%22%2C%22domains%22%3A%5B%2 2facebook.com%22%2C%22twitter.com%22%2C%22uk.pinte rest.com%22%2C%22instagram.com%22%2C%22images2.new scred.com%22%2C%22images4.newscred.com%22%2C%22ima ges1.newscred.com%22%2C%22images3.newscred.com%22% 2C%22vip.wordpress.com%22%2C%22youronlinechoices.c om%22%5D%2C%22page%22%3A%22http%3A%2F%2Fmetro.co.u k%2F2015%2F04%2F16%2Fhow-to-have-sex-according-to-stock-pictures-5012785%2F%22%7D
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Cookie: skimGUID=7e0c2e044e075df9bf8e6bf22484ca86; skimSESS=ca809b9b8609a2476d5521029155eeda
Accept-Language: fa-IR
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://metro.co.uk/2015/04/16/how-to-have-sex-according-to-stock-pictures-5012785/
User input:
POST data:
*EMPTY*
========================================
Локальное время:11.05.2016 22:20:13
Время сессии: 00:39:44
Время отчета: 21.05.2016 04:41:49
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 9.00.8112.16421
Источник: http://trc.taboola.com/metro/log/3/available
Тип: HTTP запрос
Размер (байты): 2 146
----------------------------------------
http://trc.taboola.com/metro/log/3/available
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Cookie: taboola_session_id=v2_24580a3d04cc97a15dc511aeba4a 7980_d15a26a7-c0d2-484e-b6c1-68223f79735b_1463646062_1463646062_CAwQ9KE9GI_Zm4_ KKiAB; t_gid=d15a26a7-c0d2-484e-b6c1-68223f79735b; t_vpub=CAETCPShPRABFA; JSESSIONID=.water424; taboola_upci=CIGN6sDMKhIPFQAAQEAdAABAQCUAAEBAGNrw9 QMY-PacAxiX2tMIIg8VAACAPx0AAIA_JQAAgD8iDxUAAIA_HQAAgD8 lAACAPyIPFQAAgD8dAACAPyUAAIA_Kg8VAACAPx0AAIA_JQAAg D8wAA
Accept-Language: fa-IR
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://metro.co.uk/2015/04/16/how-to-have-sex-according-to-stock-pictures-5012785/
User input:
POST data:
ri=2fdb4b0b080141d856a0a1ea701deb2b
sd=v2_24580a3d04cc97a15dc511aeba4a7980_d15a26a7-c0d2-484e-b6c1-68223f79735b_1463646062_1463646062_CAwQ9KE9GI_Zm4_ KKiAB
ui=d15a26a7-c0d2-484e-b6c1-68223f79735b
pi=%2F2015%2F04%2F16%2Fhow-to-have-sex-according-to-stock-pictures-5012785
wi=-1950721094734695221
pt=text
vi=1463005146255
li=rbox-t2m
utm=4%2C8438%2C9045%2C11388
df=1
ppb=CNwF
cpb=EhYyMDgtUkVMRUFTRS0ke3ZlcnNpb259GP4DIAAqGWFtLn RhYm9vbGFzeW5kaWNhdGlvbi5jb20yCHdhdGVyNDI0
tim=01%3A50%3A13.728
id=7459
llvl=1
cv=208-RELEASE-%24%7Bversion%7D
fil=%5B%7B%22tii%22%3A%22%7E%7EV1%7E%7E15908999439 90468381%7E%7Ewi0Lbq5qTpjO_AcPNSwvjJcP646jYXmr5TNq tyO4Cy6x0zpqFuspPNx5ZviG_F2BikqR1zj-64QAhQlHUX9MgQ%22%2C%22tipt%22%3A%22SP%22%2C%22tit %22%3A%22text%22%2C%22tids%22%3A%22a%22%7D%2C%7B%2 2tii%22%3A%22%7E%7EV1%7E%7E1888412510511798101%7E% 7EnK087_mGItXc60eLNanki5Ro1UsfHf0-1O2i3xKxtb4C5xsnLMQkNbbO3QBcrJMnikqR1zj-64QAhQlHUX9MgQ%22%2C%22tipt%22%3A%22SP%22%2C%22tit %22%3A%22text%22%2C%22tids%22%3A%22a%22%7D%2C%7B%2 2tii%22%3A%22%7E%7EV1%7E%7E2336185961171509652%7E% 7EaCOV-JlGyOquunOCE75bEVnmEEjerflMz6aHxOxkhLFNkFsVyn0sUO0 xvZ_Sh02fikqR1zj-64QAhQlHUX9MgQ%22%2C%22tipt%22%3A%22SP%22%2C%22tit %22%3A%22photo%22%2C%22tids%22%3A%22a%22%7D%2C%7B% 22tii%22%3A%22%7E%7EV1%7E%7E-7185889087621914534%7E%7Egy7s3cT3QPXZTDhYFo9an2hIo S99L-xBVvPXnmcRWllBatLOuf0BlFLqsT3HV_1vikqR1zj-64QAhQlHUX9MgQ%22%2C%22tipt%22%3A%22SP%22%2C%22tit %22%3A%22text%22%2C%22tids%22%3A%22a%22%7D%5D
========================================
Локальное время:11.05.2016 22:24:10
Время сессии: 00:43:41
Время отчета: 21.05.2016 04:41:51
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 9.00.8112.16421
Источник: http://www.linkedin.com/countserv/count/share?url=http://www.theregister.co.uk/2015/03/09/snapchat_saudi_government/&callback=jQuery111208884783006466679_146300542751 2&_=1463005427513
Тип: HTTP запрос
Размер (байты): 454
----------------------------------------
http://www.linkedin.com/countserv/count/share?url=http://www.theregister.co.uk/2015/03/09/snapchat_saudi_government/&callback=jQuery111208884783006466679_146300542751 2&_=1463005427513
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Cookie: -
Accept-Language: fa-IR
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://www.theregister.co.uk/2015/03/09/snapchat_saudi_government/
User input:
POST data:
*EMPTY*
========================================
Bot ID: OWNER-1B409C4A9_7875768FE6DBE142
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1033
Локальное время:19.05.2016 23:02:35
GMT: +1:00
Время сессии: 04:22:07
Время отчета: 21.05.2016 06:11:14
Страна: ??
IPv4: 2.100.182.218
Процесс: C:\WINDOWS\system32\svchost.exe
Информация о процессе:Microsoft Corporation | Microsoft® Windows® Operating System | 5.1.2600.5512
Источник: https://7upmuddwkb6pyupx.onion/securety/msi/scaning.php
Тип: HTTPS запрос
Размер (байты): 648
----------------------------------------
https://7upmuddwkb6pyupx.onion/securety/msi/scaning.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1024:768
Referer: -
User input:
POST data:
AXjHYSH=qgAAAAgAB4Lh2qf%2B69ZLdjQH7LoQ5QVHQSc5KKpr dPwpRamxEgAIAG5HZOoZ3G0N1tkfOgRcfp0ulCYbB%2BYRvuDM DVfKWRoACADVxTtToV08IvX7vAYKMEsScDQDXtts2WZM2BEdsN IBAAgAEVyO1OMJ2/lymWOC33B18g06cSPxmUlFXv%2Bt0FHcJgAIAGsayhm1JJNQEb WECM2nlsZa1eKlTZux2a78kJwvnhIA23gbXA0NiIKhd3wNOfRT JIrFEGosl97Hmxl3XIl0JpVUp%2BAyhQ3SSBd68EjZXjlYXlH1 CNTI4tXnwtAhMTAA/N3vBvS8SD7UdhWvuav8U7/6GVzRH3xt77tHjpVUcCtjPC0yoJSYp9A379ucONapOEm%2BTFg I2I3IooXZChcNSBmR%2BAaMX1u3EbXMcfypBhXDaKtRUQ5CCxG PnSQHBPOznA%3D%3D
========================================
Локальное время:19.05.2016 23:02:36
Время сессии: 04:22:08
Время отчета: 21.05.2016 06:11:15
Процесс: C:\WINDOWS\system32\svchost.exe
Информация о процессе:Microsoft Corporation | Microsoft® Windows® Operating System | 5.1.2600.5512
Источник: https://9ba36116e50672c4ed5b5c6d27d96a42.netvoyne.com/securety/msi/scaning.php
Тип: HTTPS запрос
Размер (байты): 669
----------------------------------------
https://9ba36116e50672c4ed5b5c6d27d96a42.netvoyne.com/securety/msi/scaning.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1024:768
Referer: -
User input:
POST data:
gWGuGmG=qgAAAAgAvGCuIYMVL9bq6XL%2Blse2/Mjvqvbem0sVhLI6zjKfJgAIAFzcmd8%2B9DMKEZDRCF8oyGUvm ENuwCyHN51eaf2hZBwACAAbhb2/pqSGYY9CV32PBtIriq2CbCtqpP2Q6mnep8sMAAgAJi1/XtJ2CbiqQROGVjpVu0TCQ8y47IQESK8mR9n/IQAIAPuhLPIJLhLNM41XlPbEGvWMudYXZibc%2Bc%2BFPBGaiS AA0/ZjlFuoCrXPhgWUlCXYSc/bLNiQu7UtNW87FoEMN/OY8h3UeVA/kegsZn9pJxkmBLPHQ4IQsQVczYLgIRUf0RpIaeAjGBVCTH33WF blFjcl46DxgC1gFpPK/UFmaBX5Ip0xFnQWEIZLcTfaubkzGKGlLE5cGchMaIzkK5wQJK4 f4xo7s%2B1tLIeDPoeoSpnsFsX4lcr/iCC8fKluR/qW2Q%3D%3D
========================================
Bot ID: OWNER-HP_1CB98D876522DF69
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Seven x64, SP 1
Язык ОС: 1033
Локальное время:21.05.2016 07:58:32
GMT: -4:00
Время сессии: 00:01:08
Время отчета: 21.05.2016 11:55:54
Страна: ??
IPv4: 98.110.182.16
Процесс: C:\Users\Owner\AppData\Roaming\Ixikozimlu\maadasel e.exe
Информация о процессе: | |
Источник: http://7yh0mdze6ztr7erew835im3w8.info/web-entry/qsdlfkgjsl.php
Тип: HTTP запрос
Размер (байты): 192
----------------------------------------
http://7yh0mdze6ztr7erew835im3w8.info/web-entry/qsdlfkgjsl.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1600:900
Referer: -
User input:
POST data:
*UNKNOWN*
========================================
Локальное время:21.05.2016 07:58:32
Время сессии: 00:01:08
Время отчета: 21.05.2016 11:55:57
Процесс: C:\Users\Owner\AppData\Roaming\Ixikozimlu\maadasel e.exe
Информация о процессе: | |
Источник: http://n254x0md9gzv4s5f6o70voq5a.info/web-entry/qsdlfkgjsl.php
Тип: HTTP запрос
Размер (байты): 192
----------------------------------------
http://n254x0md9gzv4s5f6o70voq5a.info/web-entry/qsdlfkgjsl.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1600:900
Referer: -
User input:
POST data:
*UNKNOWN*
========================================
Bot ID: PC_7875768F52EDF452
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 3082
Локальное время:13.05.2016 19:16:25
GMT: +2:00
Время сессии: 01:13:07
Время отчета: 21.05.2016 10:04:57
Страна: ??
IPv4: 89.6.107.54
Процесс: C:\Archivos de programa\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Ffleshhole.com%2Fes%2Fsearch %2Ftub%2Fhaciendo%2520una%2520paja%2520hermana%2Fl atest%2F1%2F&callback=atajsshctcbcMKQV
Тип: HTTP запрос
Размер (байты): 627
----------------------------------------
http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Ffleshhole.com%2Fes%2Fsearch %2Ftub%2Fhaciendo%2520una%2520paja%2520hermana%2Fl atest%2F1%2F&callback=atajsshctcbcMKQV
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5)
Cookie: bcookie="v=2&59e255fa-d670-4194-8eb0-13a7d96a8907"; lidc="b=TGST02:g=94:u=1:i=1463080129:t=1463166529:s=AQFD XklrM-KwbtHftCqpW8ytGP77hg2A"
Accept-Language: es
Accept-Encoding: gzip, deflate
Screen(w:h): 1024:768
Referer: http://fleshhole.com/es/search/tub/haciendo%20una%20paja%20hermana/latest/1/
User input: pajas hermans<as hermanos
POST data:
*EMPTY*
========================================
Bot ID: PROTO002-7FD986_7875768FFC9D529A
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1036
Локальное время:17.05.2016 23:13:23
GMT: +2:00
Время сессии: 01:05:07
Время отчета: 21.05.2016 08:42:55
Страна: ??
IPv4: 90.38.126.237
Процесс: H:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://accounts.google.com/ServiceLoginAuth
Тип: HTTPS запрос
Размер (байты): 1 461
----------------------------------------
https://accounts.google.com/ServiceLoginAuth
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)
Cookie: GMAIL_RTT=203; GALX=K-bxrvy6EhE
Accept-Language: fr
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:1024
Referer: https://accounts.google.com/AccountLoginInfo
User input: [email protected]
POST data:
Page=PasswordSeparationSignIn
GALX=K-bxrvy6EhE
gxf=AFoagUVV7DfuSOu2PyLxbAIG8TXwC4sgzQ%3A146351959 4841
continue=https%3A%2F%2Fmail.google.com%2Fmail%2F
service=mail
hl=fr
checkedDomains=youtube
checkConnection=youtube%3A734%3A0
pstMsg=1
ProfileInformation=APMTqukbGtVNoWoUlKvjP2lwGFu2cP1 SpaiCzjhFJslws7lvG0s31_x88mkFlYYxCu7mG5N912dF6Skt_ RkV-0uLYZZiFmeUcszJnS2_Y8dm6-pI-g3QaWg
_utf8=%E2%98%83
bgresponse=%21rK-lr45CrixKQq9HCd9EkIs9KSBVVRUCAAAAjVIAAAAQCgA72NYDS TRDei2TiXlgCJlv8MeX11RYHjlFQFlsII6eQYVseAnZRYbO66I LWgzXk-TV6NyCB7HSuPJyZXWZAOX03zs53MqCTnnJrxfLINl7Fs5Vt1gR B3Zr7mBQqHYFAB1khKSnutMN-nX0A-nIR2n9ZLsAUxAMSXn54X841TFxNz3eDDF2vX97xTswBR_6PQQB swklsDloYQmv7u4wu_fSdcARgg_462SO74XsDhcdaSjKodmh-nyJJ6uYmH82OcQTQxc_Uhdp6HYdHJCJ4dL7e2pPRlUrsCYW0f_ L_qdKBDC2NpY-84GLPiAdzJjElpbOy8bkex873gBdzS97upCkAHv9zgM52yuOm2 Fs6G0b-_zVYpMFw9kJuPTvqnEYteX14uxj
pstMsg=1
dnConn=
checkConnection=youtube%3A234%3A0
checkedDomains=youtube
[email protected]
Passwd=marineloic
signIn=Connexion
PersistentCookie=yes
rmShown=1
========================================
Bot ID: USER_7875768FB94E762F
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1033
Локальное время:21.05.2016 17:07:12
GMT: +1:00
Время сессии: 00:11:44
Время отчета: 21.05.2016 16:07:09
Страна: ??
IPv4: 217.38.85.221
Процесс: C:\Program Files\Internet Explorer\iexplore.exe
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://www.btopenzone.com:8443/ante
Тип: HTTPS запрос
Размер (байты): 580
----------------------------------------
https://www.btopenzone.com:8443/ante
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: __gads=ID=ac0c6fc0d280fdcf:T=1461960207:S=ALNI_MbX qm66N32Mo6PqDzgscQsMlRsl8g
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://www.btopenzone.com:8443/home?CPURL=http%3A%2F%2Fmydolphinshow5.pro%2F
User input:
POST data:
[email protected]
password=abcd1234
xhtmlLogon=https%3A%2F%2Fwww.btopenzone.com%3A8443 %2Fante
========================================
Локальное время:21.05.2016 17:42:09
Время сессии: 00:19:17
Время отчета: 21.05.2016 16:42:07
IPv4: 217.38.92.201
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://www.btopenzone.com:8443/ante
Тип: HTTPS запрос
Размер (байты): 844
----------------------------------------
https://www.btopenzone.com:8443/ante
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: __gads=ID=ac0c6fc0d280fdcf:T=1461960207:S=ALNI_MbX qm66N32Mo6PqDzgscQsMlRsl8g
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://www.btopenzone.com:8443/home?CPURL=http%3A%2F%2Fwww.avira.com%2Fen%2Fprodu ct-renew%3Fproductdata%3Dc2VyaWFsPTAwMDAxNDk5OTYtQVZI T0UtMDAwMDAwMSZleHBpcnlfZGF0ZT0wMi0wMS0yMDE4Jm1kNV 9oYXNoPTBBOENDN0REODIxMkMxM0U5QzU2RkM2MUU3NkM3MEU5 JnByb2R1Y3RfaWQ9NTcmb3NfdHlwZT13a3MmZGV2aWNlX2lkPT gzZWRlYWMyZjYxZDQwZGJiNGVjNmVhODZjN2MwY2M5ZTAwYzc0 YzY%3D
User input:
POST data:
[email protected]
password=abcd1234
xhtmlLogon=https%3A%2F%2Fwww.btopenzone.com%3A8443 %2Fante
========================================
Локальное время:21.05.2016 17:42:39
Время сессии: 00:19:47
Время отчета: 21.05.2016 16:45:07
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=2023392312&c7=https%3A%2F%2Fu k.yahoo.com%2F&ns__t=1463848959937&ns_c=windows-1252
Тип: HTTPS запрос
Размер (байты): 513
----------------------------------------
https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=2023392312&c7=https%3A%2F%2Fu k.yahoo.com%2F&ns__t=1463848959937&ns_c=windows-1252
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: UID=14A92a12314261a1f7c38981461960284; UIDR=1461960284; CP3=1
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://uk.yahoo.com/?p=us
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:40
Время сессии: 00:19:48
Время отчета: 21.05.2016 16:45:07
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://secure.adnxs.com/ttj?id=5784581&cb=1463848940.484705&pt0=59267532&p t1=300x250&pt2=https://uk.yahoo.com&pt3=TZbr0WKLDzM-&pt4=Kc7jlTcyLjM1N6YUVyPBpBFmMjE3LldAj.wQf9CM&pt5= 1463848940464497&pt6=${RS}|Kc7jlTcyLjM1N6YUVyPBpBF mMjE3LldAj.wQf9CM|2023392312|LREC|1463848940.48470 5|2-9-9:ysd:1&psa=false&pubclick=https://beap-bc.yahoo.com/yc/YnY9MS4wLjAmYnM9KDE3Z3N2ZnI2MShnaWQkS2M3amxUY3lMak 0xTjZZVVZ5UEJwQkZtTWpFM0xsZEFqLndRZjlDTSxzdCQxNDYz ODQ4OTQwNDY0NDk3LHNpJDMyMzMwMzIsc3AkMjAyMzM5MjMxMi xjdCQyNSx5YngkYi5sanZnZm1lNzhJQzgwZlA4S3Jldyxsbmck ZW4tZ2IsY3IkNjA3OTc1MTAzMix2JDIuMCxhaWQkVFpicjBXS0 xEek0tLGJpJDM0NzEwNjUzMixtbWUkMzMxODQ3MjI1OTM2MTkw ODMzNSxyJDAseW9vJDEsYWdwJDQzODI2NjUzMixhcCRMUkVDKS k/1/*
Тип: HTTPS запрос
Размер (байты): 1 034
----------------------------------------
https://secure.adnxs.com/ttj?id=5784581&cb=1463848940.484705&pt0=59267532&p t1=300x250&pt2=https://uk.yahoo.com&pt3=TZbr0WKLDzM-&pt4=Kc7jlTcyLjM1N6YUVyPBpBFmMjE3LldAj.wQf9CM&pt5= 1463848940464497&pt6=${RS}|Kc7jlTcyLjM1N6YUVyPBpBF mMjE3LldAj.wQf9CM|2023392312|LREC|1463848940.48470 5|2-9-9:ysd:1&psa=false&pubclick=https://beap-bc.yahoo.com/yc/YnY9MS4wLjAmYnM9KDE3Z3N2ZnI2MShnaWQkS2M3amxUY3lMak 0xTjZZVVZ5UEJwQkZtTWpFM0xsZEFqLndRZjlDTSxzdCQxNDYz ODQ4OTQwNDY0NDk3LHNpJDMyMzMwMzIsc3AkMjAyMzM5MjMxMi xjdCQyNSx5YngkYi5sanZnZm1lNzhJQzgwZlA4S3Jldyxsbmck ZW4tZ2IsY3IkNjA3OTc1MTAzMix2JDIuMCxhaWQkVFpicjBXS0 xEek0tLGJpJDM0NzEwNjUzMixtbWUkMzMxODQ3MjI1OTM2MTkw ODMzNSxyJDAseW9vJDEsYWdwJDQzODI2NjUzMixhcCRMUkVDKS k/1/*
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:44
Время сессии: 00:19:52
Время отчета: 21.05.2016 16:45:08
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://tags.mathtag.com/notify/js?exch=rmx&id=5aW95q2jLzkvIC9NMlF5WXpVM00yRXRNakp tTmkwME5UQXdMVGd5WkRVdFpUWmtabVV5TURJM05EbG0vNDI1M jA2MTA4NDI4NDA0ODYzMi8yNjI2MTg3LzEzMzg5MTcvMjcvd0V odmRoX3Y5VmpmZ0xoVjRHdGp0M0FSMkpZeDlJbThKWGpVRmZaW UpDUS8xLzI3LzE0NjM0MjMwODUvMC8yMDMzMTkvMzY0MzE2OTc 5Mi8xMzU4MjQvMjYyMzkyLzEvMC8wL00yUXlZelUzTTJFdE1qS m1OaTAwTlRBd0xUZ3laRFV0WlRaa1ptVXlNREkzTkRsbS8wLw/BKwuHbP7sjomlN6qJfPv27nIvsg&sid=1338917&cid=262618 7&nodeid=236&price=3.1500000000000004&bp=d_dhfaaa& 3pck=https%3A%2F%2Fna.ads.yahoo.com%2Fyax%2Fclk%3F sn%253D7c4f43d1be0770ec3728996dd33cf09362c536ef%25 26es%253Doyk4ad_RVIOEaN1E1r9RKpq1RaoQ0ZFyBbL2k.1Pg Jju82KXmEVY..VwLOar8ZCk.qVXGYEsw.RaSgLtEh5r9vpHcqf A4iHQhD1uVYiMq6cdZTbT0O_X2zTWmwHSZoqfQfscc2QdkjD4z mF2pc6uSOOkCeiJyQomvM7k2TXNgNM41I7iPIsYUcAg2v5m229 9ppzDss1pUzgFih.TI6WAYxZ.vEKCuDJyl58F0trsE.O9Iq5BA H0l9VWQpkgPiaxVtRKfFrUkF3.YMnCOL2VKf9eR6H1W5o4yNuJ 5xbVPxDSDqhutcvaFOnY41b2MC7NXhtAii4jVbsEkJrpDITiw2 V39N1Cq6KoXdjeL%2526ve%253D2%2526ty%253D0%2526url% 253D
Тип: HTTPS запрос
Размер (байты): 1 326
----------------------------------------
https://tags.mathtag.com/notify/js?exch=rmx&id=5aW95q2jLzkvIC9NMlF5WXpVM00yRXRNakp tTmkwME5UQXdMVGd5WkRVdFpUWmtabVV5TURJM05EbG0vNDI1M jA2MTA4NDI4NDA0ODYzMi8yNjI2MTg3LzEzMzg5MTcvMjcvd0V odmRoX3Y5VmpmZ0xoVjRHdGp0M0FSMkpZeDlJbThKWGpVRmZaW UpDUS8xLzI3LzE0NjM0MjMwODUvMC8yMDMzMTkvMzY0MzE2OTc 5Mi8xMzU4MjQvMjYyMzkyLzEvMC8wL00yUXlZelUzTTJFdE1qS m1OaTAwTlRBd0xUZ3laRFV0WlRaa1ptVXlNREkzTkRsbS8wLw/BKwuHbP7sjomlN6qJfPv27nIvsg&sid=1338917&cid=262618 7&nodeid=236&price=3.1500000000000004&bp=d_dhfaaa& 3pck=https%3A%2F%2Fna.ads.yahoo.com%2Fyax%2Fclk%3F sn%253D7c4f43d1be0770ec3728996dd33cf09362c536ef%25 26es%253Doyk4ad_RVIOEaN1E1r9RKpq1RaoQ0ZFyBbL2k.1Pg Jju82KXmEVY..VwLOar8ZCk.qVXGYEsw.RaSgLtEh5r9vpHcqf A4iHQhD1uVYiMq6cdZTbT0O_X2zTWmwHSZoqfQfscc2QdkjD4z mF2pc6uSOOkCeiJyQomvM7k2TXNgNM41I7iPIsYUcAg2v5m229 9ppzDss1pUzgFih.TI6WAYxZ.vEKCuDJyl58F0trsE.O9Iq5BA H0l9VWQpkgPiaxVtRKfFrUkF3.YMnCOL2VKf9eR6H1W5o4yNuJ 5xbVPxDSDqhutcvaFOnY41b2MC7NXhtAii4jVbsEkJrpDITiw2 V39N1Cq6KoXdjeL%2526ve%253D2%2526ty%253D0%2526url% 253D
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:44
Время сессии: 00:19:52
Время отчета: 21.05.2016 16:45:08
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://secure.adnxs.com/ttj?ttjb=1&bdc=1463848954&bdh=zlWJ9UnNNrXX0lizd0JB tK47_WY.&view_vs=1&bdref=https%3A%2F%2Fuk.yahoo.co m%2F%3Fp%3Dus&bdtop=true&bdifs=1&bstk=https%3A%2F% 2Fuk.yahoo.com%2F%3Fp%3Dus,https%3A%2F%2Fs.yimg.co m%2Frq%2Fdarla%2F2-9-9%2Fhtml%2Fr-sf.html&&id=5784581&cb=1463848940.484705&pt0=59267 532&pt1=300x250&pt2=https://uk.yahoo.com&pt3=TZbr0WKLDzM-&pt4=Kc7jlTcyLjM1N6YUVyPBpBFmMjE3LldAj.wQf9CM&pt5= 1463848940464497&pt6=${RS}|Kc7jlTcyLjM1N6YUVyPBpBF mMjE3LldAj.wQf9CM|2023392312|LREC|1463848940.48470 5|2-9-9:ysd:1&psa=false&pubclick=https://beap-bc.yahoo.com/yc/YnY9MS4wLjAmYnM9KDE3Z3N2ZnI2MShnaWQkS2M3amxUY3lMak 0xTjZZVVZ5UEJwQkZtTWpFM0xsZEFqLndRZjlDTSxzdCQxNDYz ODQ4OTQwNDY0NDk3LHNpJDMyMzMwMzIsc3AkMjAyMzM5MjMxMi xjdCQyNSx5YngkYi5sanZnZm1lNzhJQzgwZlA4S3Jldyxsbmck ZW4tZ2IsY3IkNjA3OTc1MTAzMix2JDIuMCxhaWQkVFpicjBXS0 xEek0tLGJpJDM0NzEwNjUzMixtbWUkMzMxODQ3MjI1OTM2MTkw ODMzNSxyJDAseW9vJDEsYWdwJDQzODI2NjUzMixhcCRMUkVDKS k/1/*
Тип: HTTPS запрос
Размер (байты): 1 273
----------------------------------------
https://secure.adnxs.com/ttj?ttjb=1&bdc=1463848954&bdh=zlWJ9UnNNrXX0lizd0JB tK47_WY.&view_vs=1&bdref=https%3A%2F%2Fuk.yahoo.co m%2F%3Fp%3Dus&bdtop=true&bdifs=1&bstk=https%3A%2F% 2Fuk.yahoo.com%2F%3Fp%3Dus,https%3A%2F%2Fs.yimg.co m%2Frq%2Fdarla%2F2-9-9%2Fhtml%2Fr-sf.html&&id=5784581&cb=1463848940.484705&pt0=59267 532&pt1=300x250&pt2=https://uk.yahoo.com&pt3=TZbr0WKLDzM-&pt4=Kc7jlTcyLjM1N6YUVyPBpBFmMjE3LldAj.wQf9CM&pt5= 1463848940464497&pt6=${RS}|Kc7jlTcyLjM1N6YUVyPBpBF mMjE3LldAj.wQf9CM|2023392312|LREC|1463848940.48470 5|2-9-9:ysd:1&psa=false&pubclick=https://beap-bc.yahoo.com/yc/YnY9MS4wLjAmYnM9KDE3Z3N2ZnI2MShnaWQkS2M3amxUY3lMak 0xTjZZVVZ5UEJwQkZtTWpFM0xsZEFqLndRZjlDTSxzdCQxNDYz ODQ4OTQwNDY0NDk3LHNpJDMyMzMwMzIsc3AkMjAyMzM5MjMxMi xjdCQyNSx5YngkYi5sanZnZm1lNzhJQzgwZlA4S3Jldyxsbmck ZW4tZ2IsY3IkNjA3OTc1MTAzMix2JDIuMCxhaWQkVFpicjBXS0 xEek0tLGJpJDM0NzEwNjUzMixtbWUkMzMxODQ3MjI1OTM2MTkw ODMzNSxyJDAseW9vJDEsYWdwJDQzODI2NjUzMixhcCRMUkVDKS k/1/*
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:45
Время сессии: 00:19:52
Время отчета: 21.05.2016 16:45:09
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://fw.adsafeprotected.com/rjss/dc/57980/9015543/ddm/adj/N9166.797335.XAXIS.CO.UK/B9780435.132406970;sz=300x250;ord=1463848957;dc_la t=;dc_rdid=;tag_for_child_directed_treatment=;clic k=https://secure-fra.adnxs.com/click?Are6hrVl9z93ujtqz-T0P65H4XoUrhtA7QzrVjW7FEC9spdZHzcXQDQmmqbHEG4cmjSu VJQXwlD9j0BXAAAAAAVEWABPCAAAbAEAAAIAAACC8sgC3Q4NAA AAAQBVU0QAR0JQACwB-gCizAAA9swAAgUAAQAAAKYAECcKYQAAAAA./cnd=%216gi3ZgjVgqMGEILloxYY3Z00IAAoipqQ6gU./bn=52470/referrer=https%3A%2F%2Fuk.yahoo.com%2F%3Fp%3Dus/clickenc=https%3A%2F%2Fbeap-bc.yahoo.com%2Fyc%2FYnY9MS4wLjAmYnM9KDE3Z3N2ZnI2MS hnaWQkS2M3amxUY3lMak0xTjZZVVZ5UEJwQkZtTWpFM0xsZEFq LndRZjlDTSxzdCQxNDYzODQ4OTQwNDY0NDk3LHNpJDMyMzMwMz Isc3AkMjAyMzM5MjMxMixjdCQyNSx5YngkYi5sanZnZm1lNzhJ QzgwZlA4S3JldyxsbmckZW4tZ2IsY3IkNjA3OTc1MTAzMix2JD IuMCxhaWQkVFpicjBXS0xEek0tLGJpJDM0NzEwNjUzMixtbWUk MzMxODQ3MjI1OTM2MTkwODMzNSxyJDAseW9vJDEsYWdwJDQzOD I2NjUzMixhcCRMUkVDKSk%2F1%2F%2A;?adsafe_preview=0
Тип: HTTPS запрос
Размер (байты): 1 264
----------------------------------------
https://fw.adsafeprotected.com/rjss/dc/57980/9015543/ddm/adj/N9166.797335.XAXIS.CO.UK/B9780435.132406970;sz=300x250;ord=1463848957;dc_la t=;dc_rdid=;tag_for_child_directed_treatment=;clic k=https://secure-fra.adnxs.com/click?Are6hrVl9z93ujtqz-T0P65H4XoUrhtA7QzrVjW7FEC9spdZHzcXQDQmmqbHEG4cmjSu VJQXwlD9j0BXAAAAAAVEWABPCAAAbAEAAAIAAACC8sgC3Q4NAA AAAQBVU0QAR0JQACwB-gCizAAA9swAAgUAAQAAAKYAECcKYQAAAAA./cnd=%216gi3ZgjVgqMGEILloxYY3Z00IAAoipqQ6gU./bn=52470/referrer=https%3A%2F%2Fuk.yahoo.com%2F%3Fp%3Dus/clickenc=https%3A%2F%2Fbeap-bc.yahoo.com%2Fyc%2FYnY9MS4wLjAmYnM9KDE3Z3N2ZnI2MS hnaWQkS2M3amxUY3lMak0xTjZZVVZ5UEJwQkZtTWpFM0xsZEFq LndRZjlDTSxzdCQxNDYzODQ4OTQwNDY0NDk3LHNpJDMyMzMwMz Isc3AkMjAyMzM5MjMxMixjdCQyNSx5YngkYi5sanZnZm1lNzhJ QzgwZlA4S3JldyxsbmckZW4tZ2IsY3IkNjA3OTc1MTAzMix2JD IuMCxhaWQkVFpicjBXS0xEek0tLGJpJDM0NzEwNjUzMixtbWUk MzMxODQ3MjI1OTM2MTkwODMzNSxyJDAseW9vJDEsYWdwJDQzOD I2NjUzMixhcCRMUkVDKSk%2F1%2F%2A;?adsafe_preview=0
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:45
Время сессии: 00:19:52
Время отчета: 21.05.2016 16:45:09
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://pixel.adsafeprotected.com/jload?anId=8059&advId=35343&campId=13156693&pubId= 2127&chanId=46723714&placementId=300x250&adsafe_pa r&bidurl=uk.yahoo.com&bidPr=&uId=&impId=2048593330 179810868
Тип: HTTPS запрос
Размер (байты): 533
----------------------------------------
https://pixel.adsafeprotected.com/jload?anId=8059&advId=35343&campId=13156693&pubId= 2127&chanId=46723714&placementId=300x250&adsafe_pa r&bidurl=uk.yahoo.com&bidPr=&uId=&impId=2048593330 179810868
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:45
Время сессии: 00:19:52
Время отчета: 21.05.2016 16:45:10
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://fw.adsafeprotected.com/rjss/servedby.o2.co.uk/57993/9012760/imp/6/62894;1852760;201;js;Affiperf;AFFIPERFIPHONE6FLASH SALEDESKTOPDMDR300x250CPMSTDDRSRTG0305949/?ftx=&fty=&ftadz=&ftscw=&ft_custom=%24%7BCAMPAIGN_ ID%7D%2C%24%7BAUCTION_ID%7D&ftOBA=1&ft_ifb=1&ft_do main=uk.yahoo.com&ft_referrer=https%3A%2F%2Fuk.yah oo.com%2F%3Fp%3Dus&ft_keyword=_%24%7BCAMPAIGN_ID%7 D_%2C_%24%7BAUCTION_ID%7D_&cachebuster=427933.8032 6243775&adsafe_preview=${IS_PREVIEW}
Тип: HTTPS запрос
Размер (байты): 792
----------------------------------------
https://fw.adsafeprotected.com/rjss/servedby.o2.co.uk/57993/9012760/imp/6/62894;1852760;201;js;Affiperf;AFFIPERFIPHONE6FLASH SALEDESKTOPDMDR300x250CPMSTDDRSRTG0305949/?ftx=&fty=&ftadz=&ftscw=&ft_custom=%24%7BCAMPAIGN_ ID%7D%2C%24%7BAUCTION_ID%7D&ftOBA=1&ft_ifb=1&ft_do main=uk.yahoo.com&ft_referrer=https%3A%2F%2Fuk.yah oo.com%2F%3Fp%3Dus&ft_keyword=_%24%7BCAMPAIGN_ID%7 D_%2C_%24%7BAUCTION_ID%7D_&cachebuster=427933.8032 6243775&adsafe_preview=${IS_PREVIEW}
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:45
Время сессии: 00:19:53
Время отчета: 21.05.2016 16:45:11
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://pixel.adsafeprotected.com/jload?anId=8258&advId=135824&campId=262392&pubId=1 338917&chanId=yho&placementId=2626187&adsafe_par&b idurl=https%3A//uk.yahoo.com&bidPr=1&uId=11775740-8ffc-41ec-8101-ef03ee2671f8&impId=4252061084284048632
Тип: HTTPS запрос
Размер (байты): 577
----------------------------------------
https://pixel.adsafeprotected.com/jload?anId=8258&advId=135824&campId=262392&pubId=1 338917&chanId=yho&placementId=2626187&adsafe_par&b idurl=https%3A//uk.yahoo.com&bidPr=1&uId=11775740-8ffc-41ec-8101-ef03ee2671f8&impId=4252061084284048632
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:45
Время сессии: 00:19:53
Время отчета: 21.05.2016 16:45:11
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://secure-fra.adnxs.com/vevent?e=wqT_3QKiCfReAqIEAAADANYABQEI_Z-CugUQtMzotPqYhLccGJrpuKXF8oXhUCABKi0JAre6hrVl9z8Rd 7o7as_k9D8ZrkfhehSuG0Ah7QzrVjW7FEApvbKXWR83F0AwhYj hAjjPEEDsAkgCUILloxZY3Z00YABoopkDePaZA4ABAYoBA1VTR JIBA0dCUJgBrAKgAfoBqAEAsAEAuAECwAEFyAEA0AEA2AEA4AE A6gGAA2h0dHBzOi8vYmVhcC1iYy55YWhvby5jb20veWMvWW5ZO U1TNHdMakFtWW5NOUtERTNaM04yWm5JMk1TaG5hV1FrUzJNM2F teFVZM2xNYWsweFRqWlpWVlo1VUVKd1FrWnRUV3BGTTB4c1pFR nFMbmRSWmpsRFRTeHpkQ1F4TkRZek9EUTRPVFF3TkRZME5EazN MSE5wSkRNeU16TXdNeklzYzNBa01qQXlNek01TWpNeE1peGpkQ 1F5TlN4NVluZ2tZaTVzYW5ablptMWxOemhKUXpnd1psQTRTM0p sZHl4c2JtY2taVzR0WjJJc1kzSWtOakEzT1RjMU1UQXpNaXgyS kRJdU1DeGhhV1FrVkZwaWNqQlhTMHhFZWswdExHSnBKRE0wTnp Fd05qVXpNaXh0YldVa016TXhPRFEzTWpJMU9UTTJNVGt3T0RNe k5TeHlKREFzZVc5dkpERXNZV2R3SkRRek9ESTJOalV6TWl4aGN DUk1Va1ZES1NrLzEvKvABAIoCjgF1ZignYScsIDM1MzQzLCAxN DYzODQ4OTU3KTt1ZigncicsIDQ2NzIzNzE0LCAxNDYyHgAkZyc sIDMwMzAxNkodAABpAR0kMzE0NTAsIDE0NjI5ACBsJywgODU1N zc6cwDwY5IC1QEhU2l6c25BalZncU1HRUlMbG94WVlBQ0RkblR Rd0FEZ0FRQUJJN0FKUWhZamhBbGdBWUtJRmFBQndBSGdBZ0FFQ WlBRUFrQUVCbUFFQm9BRUJxQUVEc0FFQXVRRUFBQUEBA8hRUU1 FQnZiS1hXUjgzRjBESkFUVTlsSkFuZHZBXzJRRUU1NHdvN1Ezb VAtQUJ1cDBVOVEJPDxtQUtLbXBEcUJhQUNBTFVDAU0IQUwwCQi QTkFDQU5nQ0FPQUNBT2dDQVBnQ0FJQURBUS4umgIlITZnaTNaZ zbYAHAzWjAwSUFBb2lwcVE2Z1Uu2AKkCOAClqgu6gIaaG0iCHV rLnkdeD9wPXVz8gIPCgZBRFZfSUQSBTM1MzQz8gIRCgZDUEcBE gAHLZMY8gIRCgVDUAETPAgxMzE1NjY5M_ICDwoFSU8BFAAGKZ3 wcYADAYgDAZADAJgDAKADAaoDALADALgDAMADrALIAwDYA9jtP-ADAOgDAPgDAYAEAJIEBC90dGqYBACiBA0yMTcuMzguOTIuMjAx qAQAsgQICAAQABgAIAC4BADABOeepxHIBADSBAsxMC4xMy42OC 45Mw..&a42a97e9&referrer=https%3A%2F%2Fuk.yahoo.co m%2F%3Fp%3Dus&type=nv&nvt=5&sw=1280&sh=768&pw=0&ph =0&ww=0&wh=0&ft=3&sv=39&tv=view5-1s&ua=ie6&pl=win&x=1463848965812716497,399999,v,wi n,ie7,view5-1s,0,,3
Тип: HTTPS запрос
Размер (байты): 2 096
----------------------------------------
https://secure-fra.adnxs.com/vevent?e=wqT_3QKiCfReAqIEAAADANYABQEI_Z-CugUQtMzotPqYhLccGJrpuKXF8oXhUCABKi0JAre6hrVl9z8Rd 7o7as_k9D8ZrkfhehSuG0Ah7QzrVjW7FEApvbKXWR83F0AwhYj hAjjPEEDsAkgCUILloxZY3Z00YABoopkDePaZA4ABAYoBA1VTR JIBA0dCUJgBrAKgAfoBqAEAsAEAuAECwAEFyAEA0AEA2AEA4AE A6gGAA2h0dHBzOi8vYmVhcC1iYy55YWhvby5jb20veWMvWW5ZO U1TNHdMakFtWW5NOUtERTNaM04yWm5JMk1TaG5hV1FrUzJNM2F teFVZM2xNYWsweFRqWlpWVlo1VUVKd1FrWnRUV3BGTTB4c1pFR nFMbmRSWmpsRFRTeHpkQ1F4TkRZek9EUTRPVFF3TkRZME5EazN MSE5wSkRNeU16TXdNeklzYzNBa01qQXlNek01TWpNeE1peGpkQ 1F5TlN4NVluZ2tZaTVzYW5ablptMWxOemhKUXpnd1psQTRTM0p sZHl4c2JtY2taVzR0WjJJc1kzSWtOakEzT1RjMU1UQXpNaXgyS kRJdU1DeGhhV1FrVkZwaWNqQlhTMHhFZWswdExHSnBKRE0wTnp Fd05qVXpNaXh0YldVa016TXhPRFEzTWpJMU9UTTJNVGt3T0RNe k5TeHlKREFzZVc5dkpERXNZV2R3SkRRek9ESTJOalV6TWl4aGN DUk1Va1ZES1NrLzEvKvABAIoCjgF1ZignYScsIDM1MzQzLCAxN DYzODQ4OTU3KTt1ZigncicsIDQ2NzIzNzE0LCAxNDYyHgAkZyc sIDMwMzAxNkodAABpAR0kMzE0NTAsIDE0NjI5ACBsJywgODU1N zc6cwDwY5IC1QEhU2l6c25BalZncU1HRUlMbG94WVlBQ0RkblR Rd0FEZ0FRQUJJN0FKUWhZamhBbGdBWUtJRmFBQndBSGdBZ0FFQ WlBRUFrQUVCbUFFQm9BRUJxQUVEc0FFQXVRRUFBQUEBA8hRUU1 FQnZiS1hXUjgzRjBESkFUVTlsSkFuZHZBXzJRRUU1NHdvN1Ezb VAtQUJ1cDBVOVEJPDxtQUtLbXBEcUJhQUNBTFVDAU0IQUwwCQi QTkFDQU5nQ0FPQUNBT2dDQVBnQ0FJQURBUS4umgIlITZnaTNaZ zbYAHAzWjAwSUFBb2lwcVE2Z1Uu2AKkCOAClqgu6gIaaG0iCHV rLnkdeD9wPXVz8gIPCgZBRFZfSUQSBTM1MzQz8gIRCgZDUEcBE gAHLZMY8gIRCgVDUAETPAgxMzE1NjY5M_ICDwoFSU8BFAAGKZ3 wcYADAYgDAZADAJgDAKADAaoDALADALgDAMADrALIAwDYA9jtP-ADAOgDAPgDAYAEAJIEBC90dGqYBACiBA0yMTcuMzguOTIuMjAx qAQAsgQICAAQABgAIAC4BADABOeepxHIBADSBAsxMC4xMy42OC 45Mw..&a42a97e9&referrer=https%3A%2F%2Fuk.yahoo.co m%2F%3Fp%3Dus&type=nv&nvt=5&sw=1280&sh=768&pw=0&ph =0&ww=0&wh=0&ft=3&sv=39&tv=view5-1s&ua=ie6&pl=win&x=1463848965812716497,399999,v,wi n,ie7,view5-1s,0,,3
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:46
Время сессии: 00:19:53
Время отчета: 21.05.2016 16:45:13
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://fw.adsafeprotected.com/rfw/dc/57980/9015543/ddm/adj/N9166.797335.XAXIS.CO.UK/B9780435.132406970;sz=300x250;ord=1463848957;dc_la t=;dc_rdid=;tag_for_child_directed_treatment=;clic k=https://secure-fra.adnxs.com/click?Are6hrVl9z93ujtqz-T0P65H4XoUrhtA7QzrVjW7FEC9spdZHzcXQDQmmqbHEG4cmjSu VJQXwlD9j0BXAAAAAAVEWABPCAAAbAEAAAIAAACC8sgC3Q4NAA AAAQBVU0QAR0JQACwB-gCizAAA9swAAgUAAQAAAKYAECcKYQAAAAA./cnd=%216gi3ZgjVgqMGEILloxYY3Z00IAAoipqQ6gU./bn=52470/referrer=https%3A%2F%2Fuk.yahoo.com%2F%3Fp%3Dus/clickenc=https%3A%2F%2Fbeap-bc.yahoo.com%2Fyc%2FYnY9MS4wLjAmYnM9KDE3Z3N2ZnI2MS hnaWQkS2M3amxUY3lMak0xTjZZVVZ5UEJwQkZtTWpFM0xsZEFq LndRZjlDTSxzdCQxNDYzODQ4OTQwNDY0NDk3LHNpJDMyMzMwMz Isc3AkMjAyMzM5MjMxMixjdCQyNSx5YngkYi5sanZnZm1lNzhJ QzgwZlA4S3JldyxsbmckZW4tZ2IsY3IkNjA3OTc1MTAzMix2JD IuMCxhaWQkVFpicjBXS0xEek0tLGJpJDM0NzEwNjUzMixtbWUk MzMxODQ3MjI1OTM2MTkwODMzNSxyJDAseW9vJDEsYWdwJDQzOD I2NjUzMixhcCRMUkVDKSk%2F1%2F%2A;?adsafe_preview=0& adsafe_url=https%3A%2F%2Fuk.yahoo.com%2F%3Fp%3Dus& adsafe_type=e&adsafe_url=https%3A%2F%2Fs.yimg.com% 2Frq%2Fdarla%2F2-9-9%2Fhtml%2Fr-sf.html&adsafe_type=df&adsafe_jsinfo=,c:dmwyHr,sl: na,em:true,fr:false,pt:1-5-15,br:i,fv:21.0.0.242,bv:7,dm:7,abv:8.0.6001.18702 ,an:undefined,id:064c91ae-1f73-11e6-b754-382c4ac6312d,ex:e10,pl:,rpx:0,lt:15,fc:0,rt:1,cb:0 ,np:1,th:0,es:0,gm:1,fif:0,uf:0,tt:rjss,et:125,uid :363d0594ab2bda37a1eb582e9fcce5,v:1.96.0,sp:0,ct:n a,dtm:i,mn:app28ami,gtpl:0,wr:,sr:1280.768,mf:1448 578435,ov:0
Тип: HTTPS запрос
Размер (байты): 1 775
----------------------------------------
https://fw.adsafeprotected.com/rfw/dc/57980/9015543/ddm/adj/N9166.797335.XAXIS.CO.UK/B9780435.132406970;sz=300x250;ord=1463848957;dc_la t=;dc_rdid=;tag_for_child_directed_treatment=;clic k=https://secure-fra.adnxs.com/click?Are6hrVl9z93ujtqz-T0P65H4XoUrhtA7QzrVjW7FEC9spdZHzcXQDQmmqbHEG4cmjSu VJQXwlD9j0BXAAAAAAVEWABPCAAAbAEAAAIAAACC8sgC3Q4NAA AAAQBVU0QAR0JQACwB-gCizAAA9swAAgUAAQAAAKYAECcKYQAAAAA./cnd=%216gi3ZgjVgqMGEILloxYY3Z00IAAoipqQ6gU./bn=52470/referrer=https%3A%2F%2Fuk.yahoo.com%2F%3Fp%3Dus/clickenc=https%3A%2F%2Fbeap-bc.yahoo.com%2Fyc%2FYnY9MS4wLjAmYnM9KDE3Z3N2ZnI2MS hnaWQkS2M3amxUY3lMak0xTjZZVVZ5UEJwQkZtTWpFM0xsZEFq LndRZjlDTSxzdCQxNDYzODQ4OTQwNDY0NDk3LHNpJDMyMzMwMz Isc3AkMjAyMzM5MjMxMixjdCQyNSx5YngkYi5sanZnZm1lNzhJ QzgwZlA4S3JldyxsbmckZW4tZ2IsY3IkNjA3OTc1MTAzMix2JD IuMCxhaWQkVFpicjBXS0xEek0tLGJpJDM0NzEwNjUzMixtbWUk MzMxODQ3MjI1OTM2MTkwODMzNSxyJDAseW9vJDEsYWdwJDQzOD I2NjUzMixhcCRMUkVDKSk%2F1%2F%2A;?adsafe_preview=0& adsafe_url=https%3A%2F%2Fuk.yahoo.com%2F%3Fp%3Dus& adsafe_type=e&adsafe_url=https%3A%2F%2Fs.yimg.com% 2Frq%2Fdarla%2F2-9-9%2Fhtml%2Fr-sf.html&adsafe_type=df&adsafe_jsinfo=,c:dmwyHr,sl: na,em:true,fr:false,pt:1-5-15,br:i,fv:21.0.0.242,bv:7,dm:7,abv:8.0.6001.18702 ,an:undefined,id:064c91ae-1f73-11e6-b754-382c4ac6312d,ex:e10,pl:,rpx:0,lt:15,fc:0,rt:1,cb:0 ,np:1,th:0,es:0,gm:1,fif:0,uf:0,tt:rjss,et:125,uid :363d0594ab2bda37a1eb582e9fcce5,v:1.96.0,sp:0,ct:n a,dtm:i,mn:app28ami,gtpl:0,wr:,sr:1280.768,mf:1448 578435,ov:0
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:46
Время сессии: 00:19:53
Время отчета: 21.05.2016 16:45:13
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://fw.adsafeprotected.com/rfw/servedby.o2.co.uk/57993/9012760/imp/6/62894;1852760;201;js;Affiperf;AFFIPERFIPHONE6FLASH SALEDESKTOPDMDR300x250CPMSTDDRSRTG0305949/?ftx=&fty=&ftadz=&ftscw=&ft_custom=%24%7BCAMPAIGN_ ID%7D%2C%24%7BAUCTION_ID%7D&ftOBA=1&ft_ifb=1&ft_do main=uk.yahoo.com&ft_referrer=https%3A%2F%2Fuk.yah oo.com%2F%3Fp%3Dus&ft_keyword=_%24%7BCAMPAIGN_ID%7 D_%2C_%24%7BAUCTION_ID%7D_&cachebuster=427933.8032 6243775&adsafe_preview=${IS_PREVIEW}&adsafe_url=ht tps%3A%2F%2Fuk.yahoo.com%2F%3Fp%3Dus&adsafe_type=e &adsafe_url=https%3A%2F%2Fs.yimg.com%2Frq%2Fdarla% 2F2-9-9%2Fhtml%2Fr-sf.html&adsafe_type=df&adsafe_jsinfo=,c:dmwyMe,sl: na,em:true,fr:false,pt:1-5-15,br:i,fv:21.0.0.242,bv:7,dm:7,abv:8.0.6001.18702 ,an:undefined,id:06772380-1f73-11e6-bd83-382c4ac6312d,fm
LR754k+11|12|131|132|133|14*.5799 3-9012760|15|16|17|18|19,idMap:14*,pl:,rpx:0,lt:15,f c:0,rt:1,cb:0,np:1,th:0,es:0,gm:0,fif:0,uf:0,tt:rj ss,et:94,uid:f6de1a9af94122c23122d90fa13fed,v:1.96 .0,sp:0,ct:na,dtm:i,mn:app28ami,gtpl:0,wr:,sr:1280 .768,mf:105448776,ov:0
Тип: HTTPS запрос
Размер (байты): 1 366
----------------------------------------
https://fw.adsafeprotected.com/rfw/servedby.o2.co.uk/57993/9012760/imp/6/62894;1852760;201;js;Affiperf;AFFIPERFIPHONE6FLASH SALEDESKTOPDMDR300x250CPMSTDDRSRTG0305949/?ftx=&fty=&ftadz=&ftscw=&ft_custom=%24%7BCAMPAIGN_ ID%7D%2C%24%7BAUCTION_ID%7D&ftOBA=1&ft_ifb=1&ft_do main=uk.yahoo.com&ft_referrer=https%3A%2F%2Fuk.yah oo.com%2F%3Fp%3Dus&ft_keyword=_%24%7BCAMPAIGN_ID%7 D_%2C_%24%7BAUCTION_ID%7D_&cachebuster=427933.8032 6243775&adsafe_preview=${IS_PREVIEW}&adsafe_url=ht tps%3A%2F%2Fuk.yahoo.com%2F%3Fp%3Dus&adsafe_type=e &adsafe_url=https%3A%2F%2Fs.yimg.com%2Frq%2Fdarla% 2F2-9-9%2Fhtml%2Fr-sf.html&adsafe_type=df&adsafe_jsinfo=,c:dmwyMe,sl: na,em:true,fr:false,pt:1-5-15,br:i,fv:21.0.0.242,bv:7,dm:7,abv:8.0.6001.18702 ,an:undefined,id:06772380-1f73-11e6-bd83-382c4ac6312d,fmLR754k+11|12|131|132|133|14*.5799 3-9012760|15|16|17|18|19,idMap:14*,pl:,rpx:0,lt:15,f c:0,rt:1,cb:0,np:1,th:0,es:0,gm:0,fif:0,uf:0,tt:rj ss,et:94,uid:f6de1a9af94122c23122d90fa13fed,v:1.96 .0,sp:0,ct:na,dtm:i,mn:app28ami,gtpl:0,wr:,sr:1280 .768,mf:105448776,ov:0
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:46
Время сессии: 00:19:54
Время отчета: 21.05.2016 16:45:15
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://pixel.adsafeprotected.com/mon?anId=8258&advId=135824&campId=262392&pubId=133 8917&chanId=yho&placementId=2626187&adsafe_par&bid url=https%3A//uk.yahoo.com&bidPr=1&uId=11775740-8ffc-41ec-8101-ef03ee2671f8&impId=4252061084284048632&adsafe_url= https%3A%2F%2Fuk.yahoo.com%2F%3Fp%3Dus&adsafe_type =e&adsafe_url=https%3A%2F%2Fs.yimg.com%2Frq%2Fdarl a%2F2-9-9%2Fhtml%2Fr-sf.html&adsafe_type=df&adsafe_jsinfo=,c:dmwyS2,sl: na,em:true,fr:false,pt:1-5-15,br:i,fv:21.0.0.242,bv:7,dm:7,abv:8.0.6001.18702 ,an:undefined,id:073bf9e1-1f73-11e6-8632-00259086cbca,fmLR75a8+11|12|131|132|133|14*.&pla cementId=2626187&adsafe_par&bidurl=https%3A//uk.yahoo.com&bidPr=1&uId=11775740-8ffc-41ec-8101-ef03ee2671f8&impId=4252061084284048632|141|15|16|1 7|18|19,idMap:14*,pl:,rpx:0,lt:0,fc:0,rt:1,cb:0,np :1,th:0,es:0,gm:0,fif:0,uf:0,tt:jload,et:109,uid:d 3e6785945279c6feb84fdaa62654f,v:1.96.0,sp:0,ct:na, dtm:i,mn:app23ami,gtpl:0,wr:,sr:1280.768,mf:-552330899,ov:0
Тип: HTTPS запрос
Размер (байты): 1 279
----------------------------------------
https://pixel.adsafeprotected.com/mon?anId=8258&advId=135824&campId=262392&pubId=133 8917&chanId=yho&placementId=2626187&adsafe_par&bid url=https%3A//uk.yahoo.com&bidPr=1&uId=11775740-8ffc-41ec-8101-ef03ee2671f8&impId=4252061084284048632&adsafe_url= https%3A%2F%2Fuk.yahoo.com%2F%3Fp%3Dus&adsafe_type =e&adsafe_url=https%3A%2F%2Fs.yimg.com%2Frq%2Fdarl a%2F2-9-9%2Fhtml%2Fr-sf.html&adsafe_type=df&adsafe_jsinfo=,c:dmwyS2,sl: na,em:true,fr:false,pt:1-5-15,br:i,fv:21.0.0.242,bv:7,dm:7,abv:8.0.6001.18702 ,an:undefined,id:073bf9e1-1f73-11e6-8632-00259086cbca,fmLR75a8+11|12|131|132|133|14*.&pla cementId=2626187&adsafe_par&bidurl=https%3A//uk.yahoo.com&bidPr=1&uId=11775740-8ffc-41ec-8101-ef03ee2671f8&impId=4252061084284048632|141|15|16|1 7|18|19,idMap:14*,pl:,rpx:0,lt:0,fc:0,rt:1,cb:0,np :1,th:0,es:0,gm:0,fif:0,uf:0,tt:jload,et:109,uid:d 3e6785945279c6feb84fdaa62654f,v:1.96.0,sp:0,ct:na, dtm:i,mn:app23ami,gtpl:0,wr:,sr:1280.768,mf:-552330899,ov:0
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:42:55
Время сессии: 00:20:02
Время отчета: 21.05.2016 16:45:16
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://dt.adsafeprotected.com/dt?asId=073bf9e1-1f73-11e6-8632-00259086cbca&tv={c:dmwB5D,pingTime:-2,time:8625,type:a,fc:0,rt:1,cb:0,np:1,th:0,es:0,g m:0,fif:0,slTimes:{i:0,o:0,n:8640,pp:0,pm:0,gpp:0, gpm:0,gi:0,go:0,gn:8640,fi:0,fo:0,fn:8640},slEvent s:[{sl:n,fsl:fn,gsl:gn,t:94,ac:NaN.NaN.300.250,am:und efined,cc:undefined,bkn:{piv:[8625~75],as:[2391~0.0,6234~300.250]}}],slEventCount:1,em:true,fr:false,uf:0,e:,tt:jload, dtt:0,fmLR75a8+11|12|131|132|133|14*.&placementI d=2626187&adsafe_par&bidurl=https%3A//uk.yahoo.com&bidPr=1&uId=11775740-8ffc-41ec-8101-ef03ee2671f8&impId=4252061084284048632|141|15|16|1 7|18|19,idMap:14*,pl:,fx:na,sinceFw:8391,readyFire d:true}&br=i
Тип: HTTPS запрос
Размер (байты): 1 009
----------------------------------------
https://dt.adsafeprotected.com/dt?asId=073bf9e1-1f73-11e6-8632-00259086cbca&tv={c:dmwB5D,pingTime:-2,time:8625,type:a,fc:0,rt:1,cb:0,np:1,th:0,es:0,g m:0,fif:0,slTimes:{i:0,o:0,n:8640,pp:0,pm:0,gpp:0, gpm:0,gi:0,go:0,gn:8640,fi:0,fo:0,fn:8640},slEvent s:[{sl:n,fsl:fn,gsl:gn,t:94,ac:NaN.NaN.300.250,am:und efined,cc:undefined,bkn:{piv:[8625~75],as:[2391~0.0,6234~300.250]}}],slEventCount:1,em:true,fr:false,uf:0,e:,tt:jload, dtt:0,fmLR75a8+11|12|131|132|133|14*.&placementI d=2626187&adsafe_par&bidurl=https%3A//uk.yahoo.com&bidPr=1&uId=11775740-8ffc-41ec-8101-ef03ee2671f8&impId=4252061084284048632|141|15|16|1 7|18|19,idMap:14*,pl:,fx:na,sinceFw:8391,readyFire d:true}&br=i
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:43:37
Время сессии: 00:20:45
Время отчета: 21.05.2016 16:45:17
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://secure-fra.adnxs.com/vevent?e=wqT_3QKiCfReAqIEAAADANYABQEI_Z-CugUQtMzotPqYhLccGJrpuKXF8oXhUCABKi0JAre6hrVl9z8Rd 7o7as_k9D8ZrkfhehSuG0Ah7QzrVjW7FEApvbKXWR83F0AwhYj hAjjPEEDsAkgCUILloxZY3Z00YABoopkDePaZA4ABAYoBA1VTR JIBA0dCUJgBrAKgAfoBqAEAsAEAuAECwAEFyAEA0AEA2AEA4AE A6gGAA2h0dHBzOi8vYmVhcC1iYy55YWhvby5jb20veWMvWW5ZO U1TNHdMakFtWW5NOUtERTNaM04yWm5JMk1TaG5hV1FrUzJNM2F teFVZM2xNYWsweFRqWlpWVlo1VUVKd1FrWnRUV3BGTTB4c1pFR nFMbmRSWmpsRFRTeHpkQ1F4TkRZek9EUTRPVFF3TkRZME5EazN MSE5wSkRNeU16TXdNeklzYzNBa01qQXlNek01TWpNeE1peGpkQ 1F5TlN4NVluZ2tZaTVzYW5ablptMWxOemhKUXpnd1psQTRTM0p sZHl4c2JtY2taVzR0WjJJc1kzSWtOakEzT1RjMU1UQXpNaXgyS kRJdU1DeGhhV1FrVkZwaWNqQlhTMHhFZWswdExHSnBKRE0wTnp Fd05qVXpNaXh0YldVa016TXhPRFEzTWpJMU9UTTJNVGt3T0RNe k5TeHlKREFzZVc5dkpERXNZV2R3SkRRek9ESTJOalV6TWl4aGN DUk1Va1ZES1NrLzEvKvABAIoCjgF1ZignYScsIDM1MzQzLCAxN DYzODQ4OTU3KTt1ZigncicsIDQ2NzIzNzE0LCAxNDYyHgAkZyc sIDMwMzAxNkodAABpAR0kMzE0NTAsIDE0NjI5ACBsJywgODU1N zc6cwDwY5IC1QEhU2l6c25BalZncU1HRUlMbG94WVlBQ0RkblR Rd0FEZ0FRQUJJN0FKUWhZamhBbGdBWUtJRmFBQndBSGdBZ0FFQ WlBRUFrQUVCbUFFQm9BRUJxQUVEc0FFQXVRRUFBQUEBA8hRUU1 FQnZiS1hXUjgzRjBESkFUVTlsSkFuZHZBXzJRRUU1NHdvN1Ezb VAtQUJ1cDBVOVEJPDxtQUtLbXBEcUJhQUNBTFVDAU0IQUwwCQi QTkFDQU5nQ0FPQUNBT2dDQVBnQ0FJQURBUS4umgIlITZnaTNaZ zbYAHAzWjAwSUFBb2lwcVE2Z1Uu2AKkCOAClqgu6gIaaG0iCHV rLnkdeD9wPXVz8gIPCgZBRFZfSUQSBTM1MzQz8gIRCgZDUEcBE gAHLZMY8gIRCgVDUAETPAgxMzE1NjY5M_ICDwoFSU8BFAAGKZ3 wcYADAYgDAZADAJgDAKADAaoDALADALgDAMADrALIAwDYA9jtP-ADAOgDAPgDAYAEAJIEBC90dGqYBACiBA0yMTcuMzguOTIuMjAx qAQAsgQICAAQABgAIAC4BADABOeepxHIBADSBAsxMC4xMy42OC 45Mw..&a42a97e9&referrer=https%3A%2F%2Fuk.yahoo.co m%2F%3Fp%3Dus&type=pv&jm=140|141|143&px=-24&py=252&bw=300&bh=150&sf=0.83&sw=1280&sh=768&pw= 300&ph=401&ww=300&wh=250&ft=3&sv=39&tv=view5-1s&ua=ie6&pl=win&x=1463848965812716497,399999,v,wi n,ie7,view5-1s,90,,3
Тип: HTTPS запрос
Размер (байты): 2 150
----------------------------------------
https://secure-fra.adnxs.com/vevent?e=wqT_3QKiCfReAqIEAAADANYABQEI_Z-CugUQtMzotPqYhLccGJrpuKXF8oXhUCABKi0JAre6hrVl9z8Rd 7o7as_k9D8ZrkfhehSuG0Ah7QzrVjW7FEApvbKXWR83F0AwhYj hAjjPEEDsAkgCUILloxZY3Z00YABoopkDePaZA4ABAYoBA1VTR JIBA0dCUJgBrAKgAfoBqAEAsAEAuAECwAEFyAEA0AEA2AEA4AE A6gGAA2h0dHBzOi8vYmVhcC1iYy55YWhvby5jb20veWMvWW5ZO U1TNHdMakFtWW5NOUtERTNaM04yWm5JMk1TaG5hV1FrUzJNM2F teFVZM2xNYWsweFRqWlpWVlo1VUVKd1FrWnRUV3BGTTB4c1pFR nFMbmRSWmpsRFRTeHpkQ1F4TkRZek9EUTRPVFF3TkRZME5EazN MSE5wSkRNeU16TXdNeklzYzNBa01qQXlNek01TWpNeE1peGpkQ 1F5TlN4NVluZ2tZaTVzYW5ablptMWxOemhKUXpnd1psQTRTM0p sZHl4c2JtY2taVzR0WjJJc1kzSWtOakEzT1RjMU1UQXpNaXgyS kRJdU1DeGhhV1FrVkZwaWNqQlhTMHhFZWswdExHSnBKRE0wTnp Fd05qVXpNaXh0YldVa016TXhPRFEzTWpJMU9UTTJNVGt3T0RNe k5TeHlKREFzZVc5dkpERXNZV2R3SkRRek9ESTJOalV6TWl4aGN DUk1Va1ZES1NrLzEvKvABAIoCjgF1ZignYScsIDM1MzQzLCAxN DYzODQ4OTU3KTt1ZigncicsIDQ2NzIzNzE0LCAxNDYyHgAkZyc sIDMwMzAxNkodAABpAR0kMzE0NTAsIDE0NjI5ACBsJywgODU1N zc6cwDwY5IC1QEhU2l6c25BalZncU1HRUlMbG94WVlBQ0RkblR Rd0FEZ0FRQUJJN0FKUWhZamhBbGdBWUtJRmFBQndBSGdBZ0FFQ WlBRUFrQUVCbUFFQm9BRUJxQUVEc0FFQXVRRUFBQUEBA8hRUU1 FQnZiS1hXUjgzRjBESkFUVTlsSkFuZHZBXzJRRUU1NHdvN1Ezb VAtQUJ1cDBVOVEJPDxtQUtLbXBEcUJhQUNBTFVDAU0IQUwwCQi QTkFDQU5nQ0FPQUNBT2dDQVBnQ0FJQURBUS4umgIlITZnaTNaZ zbYAHAzWjAwSUFBb2lwcVE2Z1Uu2AKkCOAClqgu6gIaaG0iCHV rLnkdeD9wPXVz8gIPCgZBRFZfSUQSBTM1MzQz8gIRCgZDUEcBE gAHLZMY8gIRCgVDUAETPAgxMzE1NjY5M_ICDwoFSU8BFAAGKZ3 wcYADAYgDAZADAJgDAKADAaoDALADALgDAMADrALIAwDYA9jtP-ADAOgDAPgDAYAEAJIEBC90dGqYBACiBA0yMTcuMzguOTIuMjAx qAQAsgQICAAQABgAIAC4BADABOeepxHIBADSBAsxMC4xMy42OC 45Mw..&a42a97e9&referrer=https%3A%2F%2Fuk.yahoo.co m%2F%3Fp%3Dus&type=pv&jm=140|141|143&px=-24&py=252&bw=300&bh=150&sf=0.83&sw=1280&sh=768&pw= 300&ph=401&ww=300&wh=250&ft=3&sv=39&tv=view5-1s&ua=ie6&pl=win&x=1463848965812716497,399999,v,wi n,ie7,view5-1s,90,,3
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:45:22
Время сессии: 00:22:29
Время отчета: 21.05.2016 16:48:17
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: https://secure-fra.adnxs.com/vevent?e=wqT_3QKiCfReAqIEAAADANYABQEI_Z-CugUQtMzotPqYhLccGJrpuKXF8oXhUCABKi0JAre6hrVl9z8Rd 7o7as_k9D8ZrkfhehSuG0Ah7QzrVjW7FEApvbKXWR83F0AwhYj hAjjPEEDsAkgCUILloxZY3Z00YABoopkDePaZA4ABAYoBA1VTR JIBA0dCUJgBrAKgAfoBqAEAsAEAuAECwAEFyAEA0AEA2AEA4AE A6gGAA2h0dHBzOi8vYmVhcC1iYy55YWhvby5jb20veWMvWW5ZO U1TNHdMakFtWW5NOUtERTNaM04yWm5JMk1TaG5hV1FrUzJNM2F teFVZM2xNYWsweFRqWlpWVlo1VUVKd1FrWnRUV3BGTTB4c1pFR nFMbmRSWmpsRFRTeHpkQ1F4TkRZek9EUTRPVFF3TkRZME5EazN MSE5wSkRNeU16TXdNeklzYzNBa01qQXlNek01TWpNeE1peGpkQ 1F5TlN4NVluZ2tZaTVzYW5ablptMWxOemhKUXpnd1psQTRTM0p sZHl4c2JtY2taVzR0WjJJc1kzSWtOakEzT1RjMU1UQXpNaXgyS kRJdU1DeGhhV1FrVkZwaWNqQlhTMHhFZWswdExHSnBKRE0wTnp Fd05qVXpNaXh0YldVa016TXhPRFEzTWpJMU9UTTJNVGt3T0RNe k5TeHlKREFzZVc5dkpERXNZV2R3SkRRek9ESTJOalV6TWl4aGN DUk1Va1ZES1NrLzEvKvABAIoCjgF1ZignYScsIDM1MzQzLCAxN DYzODQ4OTU3KTt1ZigncicsIDQ2NzIzNzE0LCAxNDYyHgAkZyc sIDMwMzAxNkodAABpAR0kMzE0NTAsIDE0NjI5ACBsJywgODU1N zc6cwDwY5IC1QEhU2l6c25BalZncU1HRUlMbG94WVlBQ0RkblR Rd0FEZ0FRQUJJN0FKUWhZamhBbGdBWUtJRmFBQndBSGdBZ0FFQ WlBRUFrQUVCbUFFQm9BRUJxQUVEc0FFQXVRRUFBQUEBA8hRUU1 FQnZiS1hXUjgzRjBESkFUVTlsSkFuZHZBXzJRRUU1NHdvN1Ezb VAtQUJ1cDBVOVEJPDxtQUtLbXBEcUJhQUNBTFVDAU0IQUwwCQi QTkFDQU5nQ0FPQUNBT2dDQVBnQ0FJQURBUS4umgIlITZnaTNaZ zbYAHAzWjAwSUFBb2lwcVE2Z1Uu2AKkCOAClqgu6gIaaG0iCHV rLnkdeD9wPXVz8gIPCgZBRFZfSUQSBTM1MzQz8gIRCgZDUEcBE gAHLZMY8gIRCgVDUAETPAgxMzE1NjY5M_ICDwoFSU8BFAAGKZ3 wcYADAYgDAZADAJgDAKADAaoDALADALgDAMADrALIAwDYA9jtP-ADAOgDAPgDAYAEAJIEBC90dGqYBACiBA0yMTcuMzguOTIuMjAx qAQAsgQICAAQABgAIAC4BADABOeepxHIBADSBAsxMC4xMy42OC 45Mw..&a42a97e9&referrer=https%3A%2F%2Fuk.yahoo.co m%2F%3Fp%3Dus&type=nv&nvt=3&jm=140|141|143&pd=139. 78&d=156.19&id=63.47&ic=3&d0=67.02&d25=64.72&d50=6 3.47&d75=45.73&d100=41.38&px=771&py=379&bw=300&bh= 150&sf=1&sw=1280&sh=768&pw=300&ph=401&ww=300&wh=25 0&ft=3&sv=39&tv=view5-1s&ua=ie6&pl=win&x=1463848965812716497,399999,v,wi n,ie7,view5-1s,90,,3
Тип: HTTPS запрос
Размер (байты): 2 250
----------------------------------------
https://secure-fra.adnxs.com/vevent?e=wqT_3QKiCfReAqIEAAADANYABQEI_Z-CugUQtMzotPqYhLccGJrpuKXF8oXhUCABKi0JAre6hrVl9z8Rd 7o7as_k9D8ZrkfhehSuG0Ah7QzrVjW7FEApvbKXWR83F0AwhYj hAjjPEEDsAkgCUILloxZY3Z00YABoopkDePaZA4ABAYoBA1VTR JIBA0dCUJgBrAKgAfoBqAEAsAEAuAECwAEFyAEA0AEA2AEA4AE A6gGAA2h0dHBzOi8vYmVhcC1iYy55YWhvby5jb20veWMvWW5ZO U1TNHdMakFtWW5NOUtERTNaM04yWm5JMk1TaG5hV1FrUzJNM2F teFVZM2xNYWsweFRqWlpWVlo1VUVKd1FrWnRUV3BGTTB4c1pFR nFMbmRSWmpsRFRTeHpkQ1F4TkRZek9EUTRPVFF3TkRZME5EazN MSE5wSkRNeU16TXdNeklzYzNBa01qQXlNek01TWpNeE1peGpkQ 1F5TlN4NVluZ2tZaTVzYW5ablptMWxOemhKUXpnd1psQTRTM0p sZHl4c2JtY2taVzR0WjJJc1kzSWtOakEzT1RjMU1UQXpNaXgyS kRJdU1DeGhhV1FrVkZwaWNqQlhTMHhFZWswdExHSnBKRE0wTnp Fd05qVXpNaXh0YldVa016TXhPRFEzTWpJMU9UTTJNVGt3T0RNe k5TeHlKREFzZVc5dkpERXNZV2R3SkRRek9ESTJOalV6TWl4aGN DUk1Va1ZES1NrLzEvKvABAIoCjgF1ZignYScsIDM1MzQzLCAxN DYzODQ4OTU3KTt1ZigncicsIDQ2NzIzNzE0LCAxNDYyHgAkZyc sIDMwMzAxNkodAABpAR0kMzE0NTAsIDE0NjI5ACBsJywgODU1N zc6cwDwY5IC1QEhU2l6c25BalZncU1HRUlMbG94WVlBQ0RkblR Rd0FEZ0FRQUJJN0FKUWhZamhBbGdBWUtJRmFBQndBSGdBZ0FFQ WlBRUFrQUVCbUFFQm9BRUJxQUVEc0FFQXVRRUFBQUEBA8hRUU1 FQnZiS1hXUjgzRjBESkFUVTlsSkFuZHZBXzJRRUU1NHdvN1Ezb VAtQUJ1cDBVOVEJPDxtQUtLbXBEcUJhQUNBTFVDAU0IQUwwCQi QTkFDQU5nQ0FPQUNBT2dDQVBnQ0FJQURBUS4umgIlITZnaTNaZ zbYAHAzWjAwSUFBb2lwcVE2Z1Uu2AKkCOAClqgu6gIaaG0iCHV rLnkdeD9wPXVz8gIPCgZBRFZfSUQSBTM1MzQz8gIRCgZDUEcBE gAHLZMY8gIRCgVDUAETPAgxMzE1NjY5M_ICDwoFSU8BFAAGKZ3 wcYADAYgDAZADAJgDAKADAaoDALADALgDAMADrALIAwDYA9jtP-ADAOgDAPgDAYAEAJIEBC90dGqYBACiBA0yMTcuMzguOTIuMjAx qAQAsgQICAAQABgAIAC4BADABOeepxHIBADSBAsxMC4xMy42OC 45Mw..&a42a97e9&referrer=https%3A%2F%2Fuk.yahoo.co m%2F%3Fp%3Dus&type=nv&nvt=3&jm=140|141|143&pd=139. 78&d=156.19&id=63.47&ic=3&d0=67.02&d25=64.72&d50=6 3.47&d75=45.73&d100=41.38&px=771&py=379&bw=300&bh= 150&sf=1&sw=1280&sh=768&pw=300&ph=401&ww=300&wh=25 0&ft=3&sv=39&tv=view5-1s&ua=ie6&pl=win&x=1463848965812716497,399999,v,wi n,ie7,view5-1s,90,,3
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: https://s.yimg.com/rq/darla/2-9-9/html/r-sf.html
User input: yahoo huge grannies
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:57:28
Время сессии: 00:34:36
Время отчета: 21.05.2016 16:57:22
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Fheretits.tv%2Fen%2F&callbac k=atajsshctcblvvRm
Тип: HTTP запрос
Размер (байты): 436
----------------------------------------
http://www.linkedin.com/countserv/count/share?url=http%3A%2F%2Fheretits.tv%2Fen%2F&callbac k=atajsshctcblvvRm
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: http://heretits.tv/en/
User input: yahoo huge grannies
POST data:
*EMPTY*
========================================
Локальное время:21.05.2016 17:57:44
Время сессии: 00:34:52
Время отчета: 21.05.2016 17:00:23
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://www.topgameconsole.com/?s=Bamboo+Wood+Coffee
Тип: HTTP запрос
Размер (байты): 1 505
----------------------------------------
http://www.topgameconsole.com/?s=Bamboo+Wood+Coffee
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: -
User input: yahoo huge grannies
POST data:
array=YTozOntzOjM6InRpZCI7czo4OiI0NzI2NjkxOSI7czoz OiJ1cmwiO3M6Mzc6Imh0dHA6Ly9jbGlja2FuYWx5dGljcy5pbm ZvL2ltZy5waHA_aT0iO3M6NDoibGluayI7czo3NTA6Imh0dHA6 Ly9yb3Zlci5lYmF5LmNvbS9yb3Zlci8xMy8wLzE5L0RlYWxGcm FtZS9EZWFsRnJhbWUuY21wP2JtPTM2MCZCRUZJRD03MzE4OCZh b249JTVFJk1lcmNoYW50SUQ9NTMwMzgzJmNyYXdsZXJfaWQ9NT MwMzgzJmRlYWxJZD1VMEdPNWhkZXRGTXNhd1pZb2FCVVBnJTNE JTNEJnVybD1odHRwJTNBJTJGJTJGdDIzLmludGVsbGlhZC5kZS UyRmluZGV4LnBocCUzRnJlZGlyZWN0JTNEaHR0cHMlMjUzQSUy NTJGJTI1MkZ3d3cudmlkYXhsLmNvLnVrJTI1MkZwJTI1MkYyND E2NjIlMjUyRmNvZmZlZS10YWJsZS13aXRoLWRyYXdlci1tZXhp Y28tcGluZXdvb2QlMjZjbCUzRDMzMjMwMzYzMzMyMzYzMjMxMz EzMDMlMjZibSUzRDEwMCUyNmJtY2wlM0QwMzMzMTM2MzEzMjM2 MzIzMTMxMzAzJTI2Y3AlM0QxMDElMjZhZyUzRDEwMSUyNmNyaW QlM0QxMDElMjZzdWJpZCUzRHNrdV8yNDE2NjImbGlua2luX2lk PTgwOTI5NTYmSXNzZHQ9MTYwNTIxMTAwNzI0JnNlYXJjaElEPX AxMi4zZGMwOTVmYTdlOTVmN2Y3NDI1ZSZEZWFsTmFtZT1Db2Zm ZWUrVGFibGUrd2l0aCtEcmF3ZXIrTWV4aWNvK1BpbmV3b29kJm RscHJjPTYxLjk5JkFSPTE4Jk5HPTEmTkRQPTMwJlBOPTEmU1Q9 NyZGUFQ9RFNQJk5EUz0mTk1TPSZNUlM9JlBEPSZicm5JZD0xND MwNSZJc0Z0cj0wJklzU21hcnQ9MCZvcD0mQ009JlJSPTE4Jklz THBzPTAmY29kZT0mYWNvZGU9MzYzJmNhdGVnb3J5PSZIYXNMaW 5rPSZORD0mTU49JkdSPSZsbmtJZD0mU0tVPTI0MTY2MiI7fQ%2 C%2C
========================================
Локальное время:21.05.2016 17:57:46
Время сессии: 00:34:53
Время отчета: 21.05.2016 17:00:23
Процесс: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Информация о процессе:Microsoft Corporation | Windows® Internet Explorer | 8.00.6001.18702
Источник: http://rover.ebay.com/rover/13/0/19/DealFrame/DealFrame.cmp?bm=360&BEFID=73188&aon=%5E&MerchantI D=530383&crawler_id=530383&dealId=U0GO5hdetFMsawZY oaBUPg%3D%3D&url=http%3A%2F%2Ft23.intelliad.de%2Fi ndex.php%3Fredirect%3Dhttps%253A%252F%252Fwww.vida xl.co.uk%252Fp%252F241662%252Fcoffee-table-with-drawer-mexico-pinewood%26cl%3D3323036333236323131303%26bm%3D100% 26bmcl%3D0333136313236323131303%26cp%3D101%26ag%3D 101%26crid%3D101%26subid%3Dsku_241662&linkin_id=80 92956&Issdt=160521100724&searchID=p12.3dc095fa7e95 f7f7425e&DealName=Coffee+Table+with+Drawer+Mexico+ Pinewood&dlprc=61.99&AR=18&NG=1&NDP=30&PN=1&ST=7&F PT=DSP&NDS=&NMS=&MRS=&PD=&brnId=14305&IsFtr=0&IsSm art=0&op=&CM=&RR=18&IsLps=0&code=&acode=363&catego ry=&HasLink=&ND=&MN=&GR=&lnkId=&SKU=241662
Тип: HTTP запрос
Размер (байты): 1 107
----------------------------------------
http://rover.ebay.com/rover/13/0/19/DealFrame/DealFrame.cmp?bm=360&BEFID=73188&aon=%5E&MerchantI D=530383&crawler_id=530383&dealId=U0GO5hdetFMsawZY oaBUPg%3D%3D&url=http%3A%2F%2Ft23.intelliad.de%2Fi ndex.php%3Fredirect%3Dhttps%253A%252F%252Fwww.vida xl.co.uk%252Fp%252F241662%252Fcoffee-table-with-drawer-mexico-pinewood%26cl%3D3323036333236323131303%26bm%3D100% 26bmcl%3D0333136313236323131303%26cp%3D101%26ag%3D 101%26crid%3D101%26subid%3Dsku_241662&linkin_id=80 92956&Issdt=160521100724&searchID=p12.3dc095fa7e95 f7f7425e&DealName=Coffee+Table+with+Drawer+Mexico+ Pinewood&dlprc=61.99&AR=18&NG=1&NDP=30&PN=1&ST=7&F PT=DSP&NDS=&NMS=&MRS=&PD=&brnId=14305&IsFtr=0&IsSm art=0&op=&CM=&RR=18&IsLps=0&code=&acode=363&catego ry=&HasLink=&ND=&MN=&GR=&lnkId=&SKU=241662
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.5; .NET CLR 2.0.50727; .NET4.0C; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Cookie: -
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1280:768
Referer: http://www.topgameconsole.com/?s=Bamboo+Wood+Coffee
User input: yahoo huge grannies
POST data:
*EMPTY*
========================================
Bot ID: USER_B1A3EE7C6522DF69
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): Unknown x64
Язык ОС: 1033
Локальное время:16.05.2016 21:15:23
GMT: -7:00
Время сессии: 145:18:59
Время отчета: 21.05.2016 13:55:01
Страна: ??
IPv4: 74.72.1.56
Процесс: C:\Users\Jia Li\AppData\Roaming\Diurzasuabs\miubgiduuza.exe
Информация о процессе: | |
Источник: http://myssfgfgfvfghkfghjlkdd1.info/webredirect/g-reyt25a5yhwebe.php
Тип: HTTP запрос
Размер (байты): 198
----------------------------------------
http://myssfgfgfvfghkfghjlkdd1.info/webredirect/g-reyt25a5yhwebe.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1600:900
Referer: -
User input:
POST data:
*UNKNOWN*
========================================
Локальное время:16.05.2016 21:15:29
Время сессии: 145:19:05
Время отчета: 21.05.2016 13:55:08
Процесс: C:\Users\Jia Li\AppData\Roaming\Diurzasuabs\miubgiduuza.exe
Информация о процессе: | |
Источник: http://myssfgfgfvfghkfghjlkdd1.info/webredirect/f-geratertrtgy25rg.php
Тип: HTTP запрос
Размер (байты): 200
----------------------------------------
http://myssfgfgfvfghkfghjlkdd1.info/webredirect/f-geratertrtgy25rg.php
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1600:900
Referer: -
User input:
POST data:
*UNKNOWN*
========================================
Bot ID: USER-97B7591000_7BF1A2E1C3A0B6FB
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1033
Локальное время:19.05.2016 22:24:35
GMT: +1:00
Время сессии: 00:26:39
Время отчета: 21.05.2016 21:35:43
Страна: ??
IPv4: 86.140.182.155
Процесс: C:\WINDOWS\Explorer.EXE
Информация о процессе:Microsoft Corporation | Microsoft® Windows® Operating System | 6.00.2900.5512
Источник: http://daylix.com/vto/proprxe/twrxstayd?toicfjc=raC5F4T9++5ulpS8ergnhsBanVEwFDrQ MmtkFc8euSBtbSulHBL1ijr82NgKQLAtYWJIQSr+KZ27Bv+ONB wUoD0zTYuzBVOqY2CkRbAPvRuDJ16FvGPYCNDQgGrr3AneSNXQ xJv2Xevrpyi5wFlHAV==
Тип: HTTP запрос
Размер (байты): 330
----------------------------------------
http://daylix.com/vto/proprxe/twrxstayd?toicfjc=raC5F4T9++5ulpS8ergnhsBanVEwFDrQ MmtkFc8euSBtbSulHBL1ijr82NgKQLAtYWJIQSr+KZ27Bv+ONB wUoD0zTYuzBVOqY2CkRbAPvRuDJ16FvGPYCNDQgGrr3AneSNXQ xJv2Xevrpyi5wFlHAV==
User-Agent: -
Cookie: -
Accept-Language: -
Accept-Encoding: -
Screen(w:h): 1280:800
Referer: -
User input:
POST data:
*UNKNOWN*
========================================
Bot ID: user2011081113_7BF1A2E1E64F580A
Ботнет: valid new
Версия: 0.0.1.1
Версия ОС (язык): XP, SP 3
Язык ОС: 1033
Локальное время:18.05.2016 21:41:29
GMT: +1:00
Время сессии: 00:07:38
Время отчета: 21.05.2016 09:31:46
Страна: ??
IPv4: 79.74.120.4
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://identity.virginmedia.com/vm_sso/idp/login.action
Тип: HTTPS запрос
Размер (байты): 3 624
----------------------------------------
https://identity.virginmedia.com/vm_sso/idp/login.action
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: sso.test.cookie=1; JSESSIONID=C0A57A6B66CA94B48D1CB7052B97CCB2; sageamp=sageampXHIDL622%7C; 1stTV=yes; m1stTV=yes; ntlWorldID=8631782291234722505; idExpire=1266258505; NGUserID=ac110328-13115-1243866266-1; sageamp=sageampPNXOJ184%7CsageampXHIDL622%7Csageam pWYKOG102%7C; camp=WYKOG102%60%601334357198000%7C; smuid=01062009-0-8238715225311243866754; inqvc=xd%3A0%5EsaleState%3AUNSOLD%5EsaleQualifiedO n%3A0%5EsoldOn%3A0%5EqualCustID%3A%5EpcState%3ADEF AULT; sageamp-770=sageampPCJWO184%7CsageampLLOEC769%7CsageampYKH OL930%7CsageampCMLNA876%7CsageampPNXOJ184%7Csageam pXHIDL622%7CsageampWTTEF799%7C; mmid=2121956839%7COAgAAAr6pjwwHgkAAA%3D%3D; __qca=P0-1251305181-1278069337109; __utma=135414574.1583735435.1324775539.1460715667. 1461232720.183; s_vi=[CS]v1|262AC71285011D95-40000103600045C2[CE]; mmcore.pd=1266256065%7CNwgAAAr6pjwwHgkAAA%3D%3D; s_cpm=%5B%5B%27DISPLAY_DR_788170%27%2C%27130574995 5828%27%5D%2C%5B%27Display_EC-Connect%27%2C%271314747192890%27%5D%2C%5B%27Portal _E5%27%2C%271324775538109%27%5D%2C%5B%27Display_EC-Connect%27%2C%271325548478796%27%5D%2C%5B%27Double Speeds_Email_2%27%2C%271326487401218%27%5D%2C%5B%2 7Portal_E5%27%2C%271337419502140%27%5D%2C%5B%27DMa il_52%27%2C%271384559701690%27%5D%2C%5B%27Direct%2 7%2C%271463604056925%27%5D%5D; mmcore.srv=ldnvwcgeu02; s_sv_112_p1=1@31@d/10718&s/13015/6056/6040&e/382; flashtalkingad1="GUID=1494831A123268|segment=(b31,b3w,bey-t:2216,dcd-m:c7_Si17,eps,e7d)"; __utmz=135414574.1461232720.183.166.utmcsr=virginm edia.com|utmccn=(referral)|utmcmd=referral|utmcct=/; s_fid=29A06495DDE95A63-2A394F218EC2F4CA; utag_main=v_id:014b4a7f4ff7000a9a24d5454b320b04100 4900d00718$_sn:625$_ss:1$_st:1463605887021$_pn:1%3 Bexp-session$ses_id:1463604087021%3Bexp-session; __gads=ID=9f7cf2dc3d2c74a4:T=1437052141:S=ALNI_MaX vqfDDsixgTZvwmTX-yKQ7ofTZQ; aam_uuid=52870022848497112414504296057018290203; mbox=PC#1450358506135-269358.21_32#1464813635|session#1463604033199-887283#1463605895; _ga=GA1.2.1583735435.1324775539; AMCV_94B35888557A99487F000101%40AdobeOrg=283337926 %7CMCAID%7C262AC71285011D95-40000103600045C2%7CMCMID%7C00660773055937795945158 234324994654089%7CMCAAMLH-1464192588%7C6%7CMCAAMB-1464192588%7Chmk_Lq6TPIBMW925SPhw3Q; cto_virginmedia=; s_nr=1463587809357; s_cc=true; gpv_pn=VME_Prospect; s_ppv=-; prop1_pn=VME%20ProspectHP; prop2_pn=ProspectHP; s_dl=1; s_cp_persist=n%2Fa; visitCheck=Customer%20Portal%20Entry; s_sq=upcvmecustomerprod%3D%2526pid%253Didentity%25 252Fvm_sso%25252Flogin-page%2526pidt%253D1%2526oid%253DSign%252520in%2526 oidt%253D3%2526ot%253DSUBMIT%26virginmediacustomer prod%3D%2526pid%253DMyVM%252520login%252520sign%25 2520in%2526pidt%253D1%2526oid%253DSign%252520in%25 26oidt%253D3%2526ot%253DSUBMIT; s_sv_sid=1137394005596
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://identity.virginmedia.com/vm_sso/idp/requestAssertion.action?SAMLRequest=eJx9kc1uwjAQhF 8l8j0%2FoIKQRYJoq6pIUEUQOPRmkk1wiNeu14nat28gRaI99O CD7Znx7Of54lM1XgeWpMaYjYKIeYC5LiRWMdtnL%2F6MLZI5Cd UYvmzdCbfw0QI5r%2Fch8etFzFqLXAuSxFEoIO5yvltu1nwcRN xY7XSuG%2BYticC6%2FqEnjdQqsDuwncxhv13H7OScIR6G6ivo pK0kKiikCHKtQpHTZTFv9dzrjKnA1BWaAkupsFSgS3k6N0Y3NR 4lGCnOuq57NaWCSHYQs1I0BJcTamGF5AS6mI2j0dSPJv5olo0j %2FhDxyfSdeelP3UeJA4Q%2FswX3sx0HEfHXLEv9bd%2FYQu6u IZ0swL71jpgdNqm2TvQEDjfQvZkNWPm1lL3j%2BT9OcYPIklvu PLwLSobd799KvgGGuKtC&RelayState=https%3A%2F%2Fmy.v irginmedia.com%2Fmy-apps%2Femail%2Fmailbox
User input: p painter65
POST data:
username=pjb.cleveland%40virgin.net
password=painter65
jsEnabled=true
========================================
Локальное время:18.05.2016 21:41:56
Время сессии: 00:08:04
Время отчета: 21.05.2016 09:31:48
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://my.virginmedia.com/acs/acs
Тип: HTTPS запрос
Размер (байты): 18 544
----------------------------------------
https://my.virginmedia.com/acs/acs
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: sageamp=sageampRORRX553sageampUIBUE463sageampPCJWO 184%7CsageampEMA5UBAH%7CsageampEMA5UBAHsageampDVXO J884sageampPNXOJ184%7CsageampXHIDL622; 1stTV=yes; m1stTV=yes; ntlWorldID=8631782291234722505; idExpire=1266258505; NGUserID=ac110328-13115-1243866266-1; sageamp=sageampPNXOJ184%7CsageampXHIDL622%7Csageam pWYKOG102%7C; camp=WYKOG102%60%601334357198000%7C; smuid=01062009-0-8238715225311243866754; inqvc=xd%3A0%5EsaleState%3AUNSOLD%5EsaleQualifiedO n%3A0%5EsoldOn%3A0%5EqualCustID%3A%5EpcState%3ADEF AULT; sageamp-770=sageampPCJWO184%7CsageampLLOEC769%7CsageampYKH OL930%7CsageampCMLNA876%7CsageampPNXOJ184%7Csageam pXHIDL622%7CsageampWTTEF799%7C; mmid=2121956839%7COAgAAAr6pjwwHgkAAA%3D%3D; __qca=P0-1251305181-1278069337109; __utma=135414574.1583735435.1324775539.1460715667. 1461232720.183; s_vi=[CS]v1|262AC71285011D95-40000103600045C2[CE]; mmcore.pd=1266256065%7CNwgAAAr6pjwwHgkAAA%3D%3D; s_cpm=%5B%5B%27DISPLAY_DR_788170%27%2C%27130574995 5828%27%5D%2C%5B%27Display_EC-Connect%27%2C%271314747192890%27%5D%2C%5B%27Portal _E5%27%2C%271324775538109%27%5D%2C%5B%27Display_EC-Connect%27%2C%271325548478796%27%5D%2C%5B%27Double Speeds_Email_2%27%2C%271326487401218%27%5D%2C%5B%2 7Portal_E5%27%2C%271337419502140%27%5D%2C%5B%27DMa il_52%27%2C%271384559701690%27%5D%2C%5B%27Direct%2 7%2C%271463604056925%27%5D%5D; mmcore.srv=ldnvwcgeu02; s_sv_112_p1=1@31@d/10718&s/13015/6056/6040&e/382; flashtalkingad1="GUID=1494831A123268|segment=(b31,b3w,bey-t:2216,dcd-m:c7_Si17,eps,e7d)"; __utmz=135414574.1461232720.183.166.utmcsr=virginm edia.com|utmccn=(referral)|utmcmd=referral|utmcct=/; ecos=582381161-1444991620; s_fid=29A06495DDE95A63-2A394F218EC2F4CA; utag_main=v_id:014b4a7f4ff7000a9a24d5454b320b04100 4900d00718$_sn:625$_ss:1$_st:1463605887021$_pn:1%3 Bexp-session$ses_id:1463604087021%3Bexp-session; __gads=ID=9f7cf2dc3d2c74a4:T=1437052141:S=ALNI_MaX vqfDDsixgTZvwmTX-yKQ7ofTZQ; aam_uuid=52870022848497112414504296057018290203; mbox=PC#1450358506135-269358.21_32#1464813635|session#1463604033199-887283#1463605895; _ga=GA1.2.1583735435.1324775539; AMCV_94B35888557A99487F000101%40AdobeOrg=283337926 %7CMCAID%7C262AC71285011D95-40000103600045C2%7CMCMID%7C00660773055937795945158 234324994654089%7CMCAAMLH-1464192588%7C6%7CMCAAMB-1464192588%7Chmk_Lq6TPIBMW925SPhw3Q; cto_virginmedia=; s_nr=1463587809357; s_cc=true; gpv_pn=VME_Prospect; s_ppv=-%2C16%2C16%2C639; prop1_pn=VME%20ProspectHP; prop2_pn=ProspectHP; s_dl=1; s_cp_persist=n%2Fa; visitCheck=Customer%20Portal%20Entry; s_sq=virginmediacustomerprod%3D%2526pid%253DMyVM%2 52520login%252520sign%252520in%2526pidt%253D1%2526 oid%253DSign%252520in%2526oidt%253D3%2526ot%253DSU BMIT%26upcvmecustomerprod%3D%2526pid%253Didentity% 25252Fvm_sso%25252Flogin-page%2526pidt%253D1%2526oid%253DSign%252520in%2526 oidt%253D3%2526ot%253DSUBMIT; s_sv_sid=1137394005596; sessionVerifier3="139A87gNlO6IOYTw52ovgsXMKVVhcs0sIPwz8RTX+mymjoWp+t rSEw1+Q=="; memberVerifier3="1398EBiCvZu9U7qgHjeEYDuIkmU7iQIF9XbpzUcnDGfZodfEG6 qI0mQyG+tNczwn8itklNJyWaLks8="
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://identity.virginmedia.com/vm_sso/idp/login.action
User input: p painter65
POST data:
SAMLResponse=%3C%3Fxml version%3D%221.0%22 encoding%3D%22UTF-8%22%3F%3E%0D%0A%3Csamlp%3AResponse xmlns%3Asamlp%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML %3A2.0%3Aprotocol%22 xmlns%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Aassertion%22 xmlns%3Axenc%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2 F04%2Fxmlenc%23%22 ID%3D%22nohnoafoenoffcmepmbpgokcflcodfdhmckpcgdi%2 2 IssueInstant%3D%222016-05-18T18%3A41%3A09Z%22 Version%3D%222.0%22%3E%3CSignature xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fx mldsig%23%22%3E%3CSignedInfo%3E%3CCanonicalization Method Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2FTR%2F2001 %2FREC-xml-c14n-20010315%23WithComments%22 %2F%3E%3CSignatureMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23dsa-sha1%22 %2F%3E%3CReference URI%3D%22%22%3E%3CTransforms%3E%3CTransform Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23enveloped-signature%22 %2F%3E%3C%2FTransforms%3E%3CDigestMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23sha1%22 %2F%3E%3CDigestValue%3EYtBnYcXRgRHUrYEgBXwmTZH8%2F 3w%3D%3C%2FDigestValue%3E%3C%2FReference%3E%3C%2FS ignedInfo%3E%3CSignatureValue%3EgYVRdAaPms5plVlj4G DwTqoASdNe8Rpp1WHsbq7OwA3Aoj0w3JdlIw%3D%3D%3C%2FSi gnatureValue%3E%3CKeyInfo%3E%3CKeyValue%3E%3CDSAKe yValue%3E%3CP%3E%2FKaCzo4Syrom78z3EQ5SbbB4sF7ey80e tKII864WF64B81uRpH5t9jQTxeEu0ImbzRMqzVDZkVG9%0D%0A xD7nN1kuFw%3D%3D%3C%2FP%3E%3CQ%3Eli7dzDacuo67Jg7mt qEm2TRuOMU%3D%3C%2FQ%3E%3CG%3EZ4Rxsnqc9E7pGknFFH2x qaryRPBaQ01khpMdLRQnG541Awtx%2FXPaF5Bpsy4pNWMOHCBi NU0Nogps%0D%0AQW5QvnlMpA%3D%3D%3C%2FG%3E%3CY%3EVMo V%2F%2FOh7VytBbZVySNmVZevV1bw7vmJwx5hHszeR25bforBF A19nk%2B3ehg6SgUjWiXn7Hsybemj%0D%0ARFs5x4%2BXFg%3D %3D%3C%2FY%3E%3C%2FDSAKeyValue%3E%3C%2FKeyValue%3E %3C%2FKeyInfo%3E%3C%2FSignature%3E%3Csamlp%3AStatu s%3E%3Csamlp%3AStatusCode Value%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Astatus%3ASuccess%22 %2F%3E%3C%2Fsamlp%3AStatus%3E%3Csaml%3AAssertion xmlns%3Asaml%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML% 3A2.0%3Aassertion%22 ID%3D%22pecomogicmfahngmnfgjbmoidekcnhlbnpkeceki%2 2 IssueInstant%3D%222003-04-17T00%3A46%3A02Z%22 Version%3D%222.0%22%3E%3Csaml%3AIssuer%3Evirginmed ia.com%3C%2Fsaml%3AIssuer%3E%3Csaml%3ASubject%3E%3 Csaml%3ANameID Format%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Anameid-format%3AemailAddress%22%3Epjb.cleveland%40virgin. net%3C%2Fsaml%3ANameID%3E%3Csaml%3ASubjectConfirma tion Method%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Acm%3Abearer%22%3E%3Csaml%3ASubjectConfirmationDa ta Recipient%3D%22https%3A%2F%2Fmy.virginmedia.com%2F acs%2Facs%22 %2F%3E%3C%2Fsaml%3ASubjectConfirmation%3E%3C%2Fsam l%3ASubject%3E%3Csaml%3AConditions NotBefore%3D%222016-05-18T19%3A40%3A09Z%22 NotOnOrAfter%3D%222016-05-18T21%3A42%3A09Z%22 %2F%3E%3Csaml%3AAuthnStatement AuthnInstant%3D%222016-05-18T20%3A41%3A09Z%22%3E%3Csaml%3AAuthnContext%3E%3C saml%3AAuthnContextClassRef%3Eurn%3Aoasis%3Anames% 3Atc%3ASAML%3A2.0%3Aac%3Aclasses%3APassword%3C%2Fs aml%3AAuthnContextClassRef%3E%3C%2Fsaml%3AAuthnCon text%3E%3C%2Fsaml%3AAuthnStatement%3E%3Csaml%3AAtt ributeStatement%3E%3Csaml%3AAttribute Name%3D%22existTVSubServiceHighestTier%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22productList%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E10102%2C10201%3C% 2Fsaml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3 E%3Csaml%3AAttribute Name%3D%22tvProductCodes%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmEbillUPI%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22LastName%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EBUTLER%3C%2Fsaml% 3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csam l%3AAttribute Name%3D%22vmPlayerLearn%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22twAccountStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EEN%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22vmLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Epjb.cleveland%40v irgin.net%3C%2Fsaml%3AAttributeValue%3E%3C%2Fsaml% 3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmHouseholdID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E108056055%3C%2Fsa ml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3C saml%3AAttribute Name%3D%22vmUserURL%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Ehttp%3A%2F%2Fhome pages.virgin.net%2Fpjb.cleveland%3C%2Fsaml%3AAttri buteValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAtt ribute Name%3D%22vmAccountID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E34119914001%3C%2F saml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E% 3Csaml%3AAttribute Name%3D%22vmAccountStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EEN%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22vmUnverifiedSSOLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmOIMProfileStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E1%3C%2Fsaml%3AAtt ributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AA ttribute Name%3D%22FirstName%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EPETER%3C%2Fsaml%3 AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml %3AAttribute Name%3D%22existTelSubServiceHighestTier%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22twSiteID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E34%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22twAccountID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E34119914001%3C%2F saml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E% 3Csaml%3AAttribute Name%3D%22vmSSOLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Epjb.cleveland%40v irgin.net%3C%2Fsaml%3AAttributeValue%3E%3C%2Fsaml% 3AAttribute%3E%3Csaml%3AAttribute Name%3D%22tierOfService%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3ET13%3C%2Fsaml%3AA ttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3 AAttribute Name%3D%22tvTierOfService%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E0%3C%2Fsaml%3AAtt ributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AA ttribute Name%3D%22vmPlayerStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmPlayerUPI%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmUserStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EEN%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22vmUserType%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EAdmin%3C%2Fsaml%3 AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml %3AAttribute Name%3D%22vmInternetCustomer%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E1%3C%2Fsaml%3AAtt ributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AA ttribute Name%3D%22bbStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EACTIVE%3C%2Fsaml% 3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csam l%3AAttribute Name%3D%22vmUnverifiedContactEmailAddress%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmUserID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E9775755%3C%2Fsaml %3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csa ml%3AAttribute Name%3D%22internetProductCodes%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EP100221%24P100421 %24P101952%24P101957%3C%2Fsaml%3AAttributeValue%3E %3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmPVRUPI%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmParentPlayerSetting%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3C%2Fsaml%3AAttrib uteStatement%3E%3C%2Fsaml%3AAssertion%3E%3C%2Fsaml p%3AResponse%3E%0D%0A
RelayState=https%3A%2F%2Fmy.virginmedia.com%2Fmy-apps%2Femail%2Fmailbox
========================================
Локальное время:18.05.2016 21:42:44
Время сессии: 00:08:52
Время отчета: 21.05.2016 09:31:50
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://mail2.virginmedia.com/ajax/saml/acs
Тип: HTTPS запрос
Размер (байты): 7 259
----------------------------------------
https://mail2.virginmedia.com/ajax/saml/acs
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: ntlWorldID=8631782291234722505; idExpire=1266258505; NGUserID=ac110328-13115-1243866266-1; sageamp=sageampPNXOJ184%7CsageampXHIDL622%7Csageam pWYKOG102%7C; camp=WYKOG102%60%601334357198000%7C; smuid=01062009-0-8238715225311243866754; inqvc=xd%3A0%5EsaleState%3AUNSOLD%5EsaleQualifiedO n%3A0%5EsoldOn%3A0%5EqualCustID%3A%5EpcState%3ADEF AULT; sageamp-770=sageampPCJWO184%7CsageampLLOEC769%7CsageampYKH OL930%7CsageampCMLNA876%7CsageampPNXOJ184%7Csageam pXHIDL622%7CsageampWTTEF799%7C; mmid=2121956839%7COAgAAAr6pjwwHgkAAA%3D%3D; __qca=P0-1251305181-1278069337109; __utma=135414574.1583735435.1324775539.1460715667. 1461232720.183; s_vi=[CS]v1|262AC71285011D95-40000103600045C2[CE]; mmcore.pd=1266256065%7CNwgAAAr6pjwwHgkAAA%3D%3D; s_cpm=%5B%5B%27DISPLAY_DR_788170%27%2C%27130574995 5828%27%5D%2C%5B%27Display_EC-Connect%27%2C%271314747192890%27%5D%2C%5B%27Portal _E5%27%2C%271324775538109%27%5D%2C%5B%27Display_EC-Connect%27%2C%271325548478796%27%5D%2C%5B%27Double Speeds_Email_2%27%2C%271326487401218%27%5D%2C%5B%2 7Portal_E5%27%2C%271337419502140%27%5D%2C%5B%27DMa il_52%27%2C%271384559701690%27%5D%2C%5B%27Direct%2 7%2C%271463604056925%27%5D%5D; mmcore.srv=ldnvwcgeu02; s_sv_112_p1=1@31@d/10718&s/13015/6056/6040&e/382; flashtalkingad1="GUID=1494831A123268|segment=(b31,b3w,bey-t:2216,dcd-m:c7_Si17,eps,e7d)"; __utmz=135414574.1461232720.183.166.utmcsr=virginm edia.com|utmccn=(referral)|utmcmd=referral|utmcct=/; s_fid=29A06495DDE95A63-2A394F218EC2F4CA; utag_main=v_id:014b4a7f4ff7000a9a24d5454b320b04100 4900d00718$_sn:625$_ss:1$_st:1463605887021$_pn:1%3 Bexp-session$ses_id:1463604087021%3Bexp-session; __gads=ID=9f7cf2dc3d2c74a4:T=1437052141:S=ALNI_MaX vqfDDsixgTZvwmTX-yKQ7ofTZQ; aam_uuid=52870022848497112414504296057018290203; mbox=PC#1450358506135-269358.21_32#1464813635|session#1463604033199-887283#1463605895; _ga=GA1.2.1583735435.1324775539; AMCV_94B35888557A99487F000101%40AdobeOrg=283337926 %7CMCAID%7C262AC71285011D95-40000103600045C2%7CMCMID%7C00660773055937795945158 234324994654089%7CMCAAMLH-1464192588%7C6%7CMCAAMB-1464192588%7Chmk_Lq6TPIBMW925SPhw3Q; cto_virginmedia=; s_nr=1463587809357; s_cc=true; gpv_pn=VME_Prospect; s_ppv=-%2C16%2C16%2C639; prop1_pn=VME%20ProspectHP; prop2_pn=ProspectHP; s_dl=1; s_cp_persist=n%2Fa; visitCheck=Customer%20Portal%20Entry; s_sq=upcvmecustomerprod%3D%2526pid%253Didentity%25 252Fvm_sso%25252Flogin-page%2526pidt%253D1%2526oid%253DSign%252520in%2526 oidt%253D3%2526ot%253DSUBMIT; s_sv_sid=1137394005596; sessionVerifier3="139A87gNlO6IOYTw52ovgsXMKVVhcs0sIPwz8RTX+mymjoWp+t rSEw1+Q=="; memberVerifier3="1398EBiCvZu9U7qgHjeEYDuIkmU7iQIF9XbpzUcnDGfZodfEG6 qI0mQyG+tNczwn8itklNJyWaLks8="; passVerifierCookie="139vbrXMeaPmbwTWElnX63CCg=="; GUID=f3cfe0fa-0b54-46df-a71e-ee04425d01a2; JSESSIONID=8647526351545280122.oxbe17; language=en_GB
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://identity.virginmedia.com/vm_sso/idp/requestAssertion.action?SAMLRequest=fZJPT%2BMwEMXv %2Byks35M4bomyVhNUQGiRKFRt4MBl5brTYhTbXY8TAZ%2Be%2 FKEsq5V6smy%2FN34zP8%2FOX01NWvConS1oGjNKwCq31XZf0I fqOsrpefljhtLUBzFvwrNdwZ8GMJA5IvjQ2S6dxcaAX4NvtYKH 1W1Bn0M4oEgSI3XN41b7vbYGtlrGyplEvsjXpC%2BZSIWUXHXl tJVhiHB06i3YoMPbf%2BbW%2FEZ03f0h8WOUrySxVP1CybXzCo a0Bd3JGoGSm6uCwoRlXOWbNNtspozv8pRBnmcTzpTMs%2Bxnp8 KlRNQt%2FPUhNnBjMUgbCspZmkXsLErzijMx5WI6idNJ%2FkTJ 0rvglKsvtB2H13grnESNwkoDKIIS6%2FniVvCYic0oQvGrqpbR 8n5dDQXarml%2F16kL%2BqT3e0ceF2TRTZCSxyMh3hPqmFkUA5 PT7xw%2BQ9FyICiGZnw%2FHiPDaWt%2ForfRbpCKkcX3l0%2B7 5REJLd%2F7Tnpys%2BRbhnLc%2Ffunyg8%3D&RelayState=37 04ac757a164af1917814a6be3b56ca
User input: p painter65
POST data:
SAMLResponse=%3C%3Fxml version%3D%221.0%22 encoding%3D%22UTF-8%22%3F%3E%0D%0A%3Csamlp%3AResponse xmlns%3Asamlp%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML %3A2.0%3Aprotocol%22 xmlns%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Aassertion%22 xmlns%3Axenc%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2 F04%2Fxmlenc%23%22 ID%3D%22edcdojoaddaggfnckkngjckhpndnbeogildppnbp%2 2 IssueInstant%3D%222016-05-18T18%3A42%3A19Z%22 Version%3D%222.0%22%3E%3CSignature xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fx mldsig%23%22%3E%3CSignedInfo%3E%3CCanonicalization Method Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2FTR%2F2001 %2FREC-xml-c14n-20010315%23WithComments%22 %2F%3E%3CSignatureMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23dsa-sha1%22 %2F%3E%3CReference URI%3D%22%22%3E%3CTransforms%3E%3CTransform Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23enveloped-signature%22 %2F%3E%3C%2FTransforms%3E%3CDigestMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23sha1%22 %2F%3E%3CDigestValue%3EDf%2FJEBwfO%2Bx5LRqGprSXm3D hlHQ%3D%3C%2FDigestValue%3E%3C%2FReference%3E%3C%2 FSignedInfo%3E%3CSignatureValue%3ERphI4nRQ6ly0epPw BzjpCwecIGt9CZiD6Dbpzv2LcUjon6fy1Mj2ZA%3D%3D%3C%2F SignatureValue%3E%3CKeyInfo%3E%3CKeyValue%3E%3CDSA KeyValue%3E%3CP%3E%2FKaCzo4Syrom78z3EQ5SbbB4sF7ey8 0etKII864WF64B81uRpH5t9jQTxeEu0ImbzRMqzVDZkVG9%0D% 0AxD7nN1kuFw%3D%3D%3C%2FP%3E%3CQ%3Eli7dzDacuo67Jg7 mtqEm2TRuOMU%3D%3C%2FQ%3E%3CG%3EZ4Rxsnqc9E7pGknFFH 2xqaryRPBaQ01khpMdLRQnG541Awtx%2FXPaF5Bpsy4pNWMOHC BiNU0Nogps%0D%0AQW5QvnlMpA%3D%3D%3C%2FG%3E%3CY%3EV MoV%2F%2FOh7VytBbZVySNmVZevV1bw7vmJwx5hHszeR25bfor BFA19nk%2B3ehg6SgUjWiXn7Hsybemj%0D%0ARFs5x4%2BXFg% 3D%3D%3C%2FY%3E%3C%2FDSAKeyValue%3E%3C%2FKeyValue% 3E%3C%2FKeyInfo%3E%3C%2FSignature%3E%3Csamlp%3ASta tus%3E%3Csamlp%3AStatusCode Value%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Astatus%3ASuccess%22 %2F%3E%3C%2Fsamlp%3AStatus%3E%3Csaml%3AAssertion xmlns%3Asaml%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML% 3A2.0%3Aassertion%22 ID%3D%22jmijdegofdhlopeecdadffijoifagkonpeljpogn%2 2 IssueInstant%3D%222003-04-17T00%3A46%3A02Z%22 Version%3D%222.0%22%3E%3Csaml%3AIssuer%3Evirginmed ia.com%3C%2Fsaml%3AIssuer%3E%3Csaml%3ASubject%3E%3 Csaml%3ANameID Format%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Anameid-format%3AemailAddress%22%3Epjb.cleveland%40virgin. net%3C%2Fsaml%3ANameID%3E%3Csaml%3ASubjectConfirma tion Method%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Acm%3Abearer%22%3E%3Csaml%3ASubjectConfirmationDa ta Recipient%3D%22https%3A%2F%2Fmail2.virginmedia.com %2Fajax%2Fsaml%2Facs%22 %2F%3E%3C%2Fsaml%3ASubjectConfirmation%3E%3C%2Fsam l%3ASubject%3E%3Csaml%3AConditions NotBefore%3D%222016-05-18T19%3A41%3A19Z%22 NotOnOrAfter%3D%222016-05-18T21%3A43%3A19Z%22 %2F%3E%3Csaml%3AAuthnStatement AuthnInstant%3D%222016-05-18T20%3A42%3A19Z%22%3E%3Csaml%3AAuthnContext%3E%3C saml%3AAuthnContextClassRef%3Eurn%3Aoasis%3Anames% 3Atc%3ASAML%3A2.0%3Aac%3Aclasses%3APassword%3C%2Fs aml%3AAuthnContextClassRef%3E%3C%2Fsaml%3AAuthnCon text%3E%3C%2Fsaml%3AAuthnStatement%3E%3Csaml%3AAtt ributeStatement%3E%3Csaml%3AAttribute Name%3D%22vmLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Epjb.cleveland%40v irgin.net%3C%2Fsaml%3AAttributeValue%3E%3C%2Fsaml% 3AAttribute%3E%3C%2Fsaml%3AAttributeStatement%3E%3 C%2Fsaml%3AAssertion%3E%3C%2Fsamlp%3AResponse%3E%0 D%0A
RelayState=3704ac757a164af1917814a6be3b56ca
========================================
Локальное время:18.05.2016 21:43:46
Время сессии: 00:09:54
Время отчета: 21.05.2016 09:31:52
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://uk.match.com/ajax/event_push_profiles.php
Тип: HTTPS запрос
Размер (байты): 2 125
----------------------------------------
https://uk.match.com/ajax/event_push_profiles.php
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: ckemail=%5B%5B%2Aenc%2A%5D%5DOCsufRQcAh0IHxIfFxU8U UsvIS9iPRIE; __gads=ID=f5cefef1943e6c5b:T=1425471799:S=ALNI_Mbt SpXqG9JIvUNINd9Vefa0Zito3Q; MEETIC_USER=1; __qca=P0-402128279-1428142230909; __adal_first_visit=1428794078333; __utma=22327999.1016151309.1431598354.1438087056.1 438162486.130; _ga=GA1.3.1016151309.1431598354; grvinsights=045013414d0c24acd258623d846b8173; _ga=GA1.2.1016151309.1431598354; tk_uid=573cd3feb40115.60151867; tk_uid_ts=1463604223366; cookie_signpost_2014=yes; ckemail=%5B%5B%2Aenc%2A%5D%5DOCsufRQcAh0IHxIfFxU8U UsvIS9iPRIE; __ar_v4=ZCXT77N2FFCWTGBEADRU4S%3A20160420%3A4%7CY2 2ZR6OEORHJJGJC56MHPG%3A20160506%3A20%7CWO2X4ADDYFG GXMYLAUBJDM%3A20160506%3A20%7CWA5RGGAD2RBIRKKO5AOK D6%3A20160506%3A18; __sonar=14280085564110304371; STACK_CMK=080004; CS_CAP170344088=a%3A1%3A%7Bs%3A7%3A%22payment%22%3 Bi%3A6%3B%7D; MEETIC_HPV=080004%3B6604%3B%2Flanding%2F2016%2F03% 2F04%2Fhpv-belowthefold-video-3steps-geo-psc%3B0%3B%3Bunlogged; MEEMEMSEGENC=%5B%5B%2Aenc%2A%5D%5DJHR7Vx4eaXZ9URoF PmgDSn93dGElI09oNn1AS1E0LV0bfjZ0cVdHWmVnfABLRG9oW1 YwKzoxFEdWIH91SVMmHmgDSn93dGEOFU9oNn1HS1EMBQkJZ349 eV5fTzcgN1FKAG94AhscCmx4Hl9ZaWckGgUKd3FLA3F%2FbBoi NyZxfjRJR0l3OktcMCEhYVYWV2JxfVEiEicrS003KhoQMlRba2 d8AEtCZHAaXD0sPTceOh0yNjRRShpvegNE; MESSAGE_VIEW_COUNTER=218; MODE_AFF_LIST=1; layerRushHourShown=1; meetic_cmk=080004; trackingcodeop=4002032; codeop=4002032; meetic_sessid=17__3_d777c7ba73500ea7388ee598aa9724 59; remenc=92B0B0F44D37138FDAE2D82EFBAF80621E661E8EB82 65702ACDABAC96FA8F91FFD4FDACB1FDFA73A96903578A7104 5345C42BEE2578969B34A26D57D5F9FB8B91582F729780AD53 8B712F9B2B5AB4865; MeeticLTM=1577086474.20992.0000; ky=3605182243370172317; ADRUM_BT=R%3A37%7CclientRequestGUID%3Ae53b73c2-f0e6-48aa-86e4-dca567ee3946139%7CbtId%3A2984%7CbtDuration%3A693%7 CbackendSnapshotType%3Af%7CbtERT%3A160
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://uk.match.com/search/visit.php
User input: p painter65
POST data:
aref=560688664
events%5B%5D=score
========================================
Локальное время:18.05.2016 21:44:12
Время сессии: 00:10:21
Время отчета: 21.05.2016 09:31:54
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://ums.adtech.de/mapuser?providerid=1034;getuser=https://pr-bh.ybp.yahoo.com/sync/adtech/$UID?secure=true
Тип: HTTPS запрос
Размер (байты): 478
----------------------------------------
https://ums.adtech.de/mapuser?providerid=1034;getuser=https://pr-bh.ybp.yahoo.com/sync/adtech/$UID?secure=true
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: JEB2=50AABA136E6516263120204DF0102CAC; ADMARK=Wed, 18 May 2016 20:44:11 GMT
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://uk.match.com/as.php?type=search&ban=ban&position=footer
User input: p painter65
POST data:
*EMPTY*
========================================
Локальное время:20.05.2016 10:32:29
Время сессии: 00:09:17
Время отчета: 21.05.2016 09:31:56
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://identity.virginmedia.com/vm_sso/idp/login.action
Тип: HTTPS запрос
Размер (байты): 3 627
----------------------------------------
https://identity.virginmedia.com/vm_sso/idp/login.action
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: sso.test.cookie=1; JSESSIONID=B44F9FB37FF56B9F24C6A0F40F5E4B01; sageamp=sageampXHIDL622%7C; 1stTV=yes; m1stTV=yes; ntlWorldID=8631782291234722505; idExpire=1266258505; NGUserID=ac110328-13115-1243866266-1; sageamp=sageampPNXOJ184%7CsageampXHIDL622%7Csageam pWYKOG102%7C; camp=WYKOG102%60%601334357198000%7C; smuid=01062009-0-8238715225311243866754; inqvc=xd%3A0%5EsaleState%3AUNSOLD%5EsaleQualifiedO n%3A0%5EsoldOn%3A0%5EqualCustID%3A%5EpcState%3ADEF AULT; sageamp-770=sageampPCJWO184%7CsageampLLOEC769%7CsageampYKH OL930%7CsageampCMLNA876%7CsageampPNXOJ184%7Csageam pXHIDL622%7CsageampWTTEF799%7C; mmid=2121956839%7COAgAAAr6pjwwHgkAAA%3D%3D; __qca=P0-1251305181-1278069337109; __utma=135414574.1583735435.1324775539.1460715667. 1461232720.183; s_vi=[CS]v1|262AC71285011D95-40000103600045C2[CE]; mmcore.pd=1266256065%7CNwgAAAr6pjwwHgkAAA%3D%3D; s_cpm=%5B%5B%27DISPLAY_DR_788170%27%2C%27130574995 5828%27%5D%2C%5B%27Display_EC-Connect%27%2C%271314747192890%27%5D%2C%5B%27Portal _E5%27%2C%271324775538109%27%5D%2C%5B%27Display_EC-Connect%27%2C%271325548478796%27%5D%2C%5B%27Double Speeds_Email_2%27%2C%271326487401218%27%5D%2C%5B%2 7Portal_E5%27%2C%271337419502140%27%5D%2C%5B%27DMa il_52%27%2C%271384559701690%27%5D%2C%5B%27Direct%2 7%2C%271463736697173%27%5D%5D; mmcore.srv=ldnvwcgeu02; s_sv_112_p1=1@31@d/10718&s/13015/6056/6040&e/382; flashtalkingad1="GUID=1494831A123268|segment=(b31,b3w,bey-t:2216,dcd-m:c7_Si17,eps,e7d)"; __utmz=135414574.1461232720.183.166.utmcsr=virginm edia.com|utmccn=(referral)|utmcmd=referral|utmcct=/; s_fid=29A06495DDE95A63-2A394F218EC2F4CA; utag_main=v_id:014b4a7f4ff7000a9a24d5454b320b04100 4900d00718$_sn:626$_ss:0$_st:1463738472422$_pn:2%3 Bexp-session$ses_id:1463736672377%3Bexp-session; __gads=ID=9f7cf2dc3d2c74a4:T=1437052141:S=ALNI_MaX vqfDDsixgTZvwmTX-yKQ7ofTZQ; aam_uuid=52870022848497112414504296057018290203; mbox=PC#1450358506135-269358.21_32#1464946268|session#1463736665989-922768#1463738528; _ga=GA1.2.1583735435.1324775539; AMCV_94B35888557A99487F000101%40AdobeOrg=283337926 %7CMCAID%7C262AC71285011D95-40000103600045C2%7CMCMID%7C00660773055937795945158 234324994654089%7CMCAAMLH-1464192588%7C6%7CMCAAMB-1464192588%7Chmk_Lq6TPIBMW925SPhw3Q; cto_virginmedia=; s_nr=1463587809357; s_cc=true; gpv_pn=VME_Prospect; s_ppv=-; prop1_pn=VME%20ProspectHP; prop2_pn=ProspectHP; s_dl=1; s_cp_persist=n%2Fa; visitCheck=Customer%20Portal%20Entry; s_sq=upcvmecustomerprod%3D%2526pid%253Didentity%25 252Fvm_sso%25252Flogin-page%2526pidt%253D1%2526oid%253DSign%252520in%2526 oidt%253D3%2526ot%253DSUBMIT%26virginmediacustomer prod%3D%2526pid%253DMyVM%252520login%252520sign%25 2520in%2526pidt%253D1%2526oid%253DSign%252520in%25 26oidt%253D3%2526ot%253DSUBMIT; s_sv_sid=893858972373
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: identity
Screen(w:h): 1024:768
Referer: https://identity.virginmedia.com/vm_sso/idp/requestAssertion.action?SAMLRequest=eJx9kc1OwzAQhF 8l8j0%2FpAKB1aQqIESlFkVt2gM319k0TpN18DoRvD1uQ6XCgY MPtmfGs5%2Bns8%2B28QYwpDQm7CaImAcodaHwkLBt%2FuLfs1 k6JdE2HZ%2F3tsI1fPRA1nM%2BJH6%2BSFhvkGtBijiKFohbyT fz1ZLHQcQ7o62WumHenAiMdQ89aaS%2BBbMBMygJ2%2FUyYZW1 HfEwbL%2BCQZmDwhYKJQKp21BIOi3mLZ6dTuFe7FHXdSVL1UCH SpVYqwbL6tjU%2BniUUBWldGrKBJEaIGGlaAhOJ9TDAskKtAmL o5s7P7r14yiPHvgk5tHknXnZT91HhSOEP7MF17PtRxHx1zzP%2 FLVrbEDac8igCjBvzpGw3SrTxgpHYHcB7cxsxMrPpcwVz%2F9x igtEll5yp%2BFVUDrufv9W%2Bg07Bqr%2B&RelayState=http s%3A%2F%2Fmy.virginmedia.com%2Fmy-apps%2Femail%2Fmailbox
User input: ppainter65
POST data:
username=pjb.cleveland%40virgin.net
password=painter65
jsEnabled=true
========================================
Локальное время:20.05.2016 10:32:39
Время сессии: 00:09:27
Время отчета: 21.05.2016 09:31:57
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://my.virginmedia.com/acs/acs
Тип: HTTPS запрос
Размер (байты): 18 525
----------------------------------------
https://my.virginmedia.com/acs/acs
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: sageamp=sageampRORRX553sageampUIBUE463sageampPCJWO 184%7CsageampEMA5UBAH%7CsageampEMA5UBAHsageampDVXO J884sageampPNXOJ184%7CsageampXHIDL622; 1stTV=yes; m1stTV=yes; ntlWorldID=8631782291234722505; idExpire=1266258505; NGUserID=ac110328-13115-1243866266-1; sageamp=sageampPNXOJ184%7CsageampXHIDL622%7Csageam pWYKOG102%7C; camp=WYKOG102%60%601334357198000%7C; smuid=01062009-0-8238715225311243866754; inqvc=xd%3A0%5EsaleState%3AUNSOLD%5EsaleQualifiedO n%3A0%5EsoldOn%3A0%5EqualCustID%3A%5EpcState%3ADEF AULT; sageamp-770=sageampPCJWO184%7CsageampLLOEC769%7CsageampYKH OL930%7CsageampCMLNA876%7CsageampPNXOJ184%7Csageam pXHIDL622%7CsageampWTTEF799%7C; mmid=2121956839%7COAgAAAr6pjwwHgkAAA%3D%3D; __qca=P0-1251305181-1278069337109; __utma=135414574.1583735435.1324775539.1460715667. 1461232720.183; s_vi=[CS]v1|262AC71285011D95-40000103600045C2[CE]; mmcore.pd=1266256065%7CNwgAAAr6pjwwHgkAAA%3D%3D; s_cpm=%5B%5B%27DISPLAY_DR_788170%27%2C%27130574995 5828%27%5D%2C%5B%27Display_EC-Connect%27%2C%271314747192890%27%5D%2C%5B%27Portal _E5%27%2C%271324775538109%27%5D%2C%5B%27Display_EC-Connect%27%2C%271325548478796%27%5D%2C%5B%27Double Speeds_Email_2%27%2C%271326487401218%27%5D%2C%5B%2 7Portal_E5%27%2C%271337419502140%27%5D%2C%5B%27DMa il_52%27%2C%271384559701690%27%5D%2C%5B%27Direct%2 7%2C%271463736697173%27%5D%5D; mmcore.srv=ldnvwcgeu02; s_sv_112_p1=1@31@d/10718&s/13015/6056/6040&e/382; flashtalkingad1="GUID=1494831A123268|segment=(b31,b3w,bey-t:2216,dcd-m:c7_Si17,eps,e7d)"; __utmz=135414574.1461232720.183.166.utmcsr=virginm edia.com|utmccn=(referral)|utmcmd=referral|utmcct=/; ecos=582381161-1444991620; s_fid=29A06495DDE95A63-2A394F218EC2F4CA; utag_main=v_id:014b4a7f4ff7000a9a24d5454b320b04100 4900d00718$_sn:626$_ss:0$_st:1463738472422$_pn:2%3 Bexp-session$ses_id:1463736672377%3Bexp-session; __gads=ID=9f7cf2dc3d2c74a4:T=1437052141:S=ALNI_MaX vqfDDsixgTZvwmTX-yKQ7ofTZQ; aam_uuid=52870022848497112414504296057018290203; mbox=PC#1450358506135-269358.21_32#1464946268|session#1463736665989-922768#1463738528; _ga=GA1.2.1583735435.1324775539; AMCV_94B35888557A99487F000101%40AdobeOrg=283337926 %7CMCAID%7C262AC71285011D95-40000103600045C2%7CMCMID%7C00660773055937795945158 234324994654089%7CMCAAMLH-1464192588%7C6%7CMCAAMB-1464192588%7Chmk_Lq6TPIBMW925SPhw3Q; cto_virginmedia=; s_nr=1463587809357; s_cc=true; gpv_pn=VME_Prospect; s_ppv=-; prop1_pn=VME%20ProspectHP; prop2_pn=ProspectHP; s_dl=1; s_cp_persist=n%2Fa; visitCheck=Customer%20Portal%20Entry; s_sq=upcvmecustomerprod%3D%2526pid%253Didentity%25 252Fvm_sso%25252Flogin-page%2526pidt%253D1%2526oid%253DSign%252520in%2526 oidt%253D3%2526ot%253DSUBMIT%26virginmediacustomer prod%3D%2526pid%253DMyVM%252520login%252520sign%25 2520in%2526pidt%253D1%2526oid%253DSign%252520in%25 26oidt%253D3%2526ot%253DSUBMIT; s_sv_sid=893858972373; sessionVerifier3="1418U3ChNrQ2Dh7TjCpkOh8K6vE2MsWxuwgI9dFBeXwg3ZCmFH gyx2byg=="; memberVerifier3="141wEHPui1MkVJ9tsT2k8vtVj8EXySpaxUcxD2JXqnLpN6eYOv H2PWck5q0zSLmJV92NAZCA/LOJ1Y="
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: identity
Screen(w:h): 1024:768
Referer: https://identity.virginmedia.com/vm_sso/idp/login.action
User input: ppainter65
POST data:
SAMLResponse=%3C%3Fxml version%3D%221.0%22 encoding%3D%22UTF-8%22%3F%3E%0D%0A%3Csamlp%3AResponse xmlns%3Asamlp%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML %3A2.0%3Aprotocol%22 xmlns%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Aassertion%22 xmlns%3Axenc%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2 F04%2Fxmlenc%23%22 ID%3D%22ikfpeakehnkjbeckmfbecjphohkiihcaaggplfip%2 2 IssueInstant%3D%222016-05-20T07%3A32%3A07Z%22 Version%3D%222.0%22%3E%3CSignature xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fx mldsig%23%22%3E%3CSignedInfo%3E%3CCanonicalization Method Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2FTR%2F2001 %2FREC-xml-c14n-20010315%23WithComments%22 %2F%3E%3CSignatureMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23dsa-sha1%22 %2F%3E%3CReference URI%3D%22%22%3E%3CTransforms%3E%3CTransform Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23enveloped-signature%22 %2F%3E%3C%2FTransforms%3E%3CDigestMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23sha1%22 %2F%3E%3CDigestValue%3EHifE4J4a9VrEb%2FsXUoMe%2F1z %2FJOY%3D%3C%2FDigestValue%3E%3C%2FReference%3E%3C %2FSignedInfo%3E%3CSignatureValue%3EKNcp%2B1zjroPL I1fIMOfh3TIdZ1KI6qYWjUB2O%2BRCRa28wpru9TFoRw%3D%3D %3C%2FSignatureValue%3E%3CKeyInfo%3E%3CKeyValue%3E %3CDSAKeyValue%3E%3CP%3E%2FKaCzo4Syrom78z3EQ5SbbB4 sF7ey80etKII864WF64B81uRpH5t9jQTxeEu0ImbzRMqzVDZkV G9%0D%0AxD7nN1kuFw%3D%3D%3C%2FP%3E%3CQ%3Eli7dzDacu o67Jg7mtqEm2TRuOMU%3D%3C%2FQ%3E%3CG%3EZ4Rxsnqc9E7p GknFFH2xqaryRPBaQ01khpMdLRQnG541Awtx%2FXPaF5Bpsy4p NWMOHCBiNU0Nogps%0D%0AQW5QvnlMpA%3D%3D%3C%2FG%3E%3 CY%3EVMoV%2F%2FOh7VytBbZVySNmVZevV1bw7vmJwx5hHszeR 25bforBFA19nk%2B3ehg6SgUjWiXn7Hsybemj%0D%0ARFs5x4% 2BXFg%3D%3D%3C%2FY%3E%3C%2FDSAKeyValue%3E%3C%2FKey Value%3E%3C%2FKeyInfo%3E%3C%2FSignature%3E%3Csamlp %3AStatus%3E%3Csamlp%3AStatusCode Value%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Astatus%3ASuccess%22 %2F%3E%3C%2Fsamlp%3AStatus%3E%3Csaml%3AAssertion xmlns%3Asaml%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML% 3A2.0%3Aassertion%22 ID%3D%22ekpomlpbmihphmmanpkahfgpmdlanhkojmnofaag%2 2 IssueInstant%3D%222003-04-17T00%3A46%3A02Z%22 Version%3D%222.0%22%3E%3Csaml%3AIssuer%3Evirginmed ia.com%3C%2Fsaml%3AIssuer%3E%3Csaml%3ASubject%3E%3 Csaml%3ANameID Format%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Anameid-format%3AemailAddress%22%3Epjb.cleveland%40virgin. net%3C%2Fsaml%3ANameID%3E%3Csaml%3ASubjectConfirma tion Method%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Acm%3Abearer%22%3E%3Csaml%3ASubjectConfirmationDa ta Recipient%3D%22https%3A%2F%2Fmy.virginmedia.com%2F acs%2Facs%22 %2F%3E%3C%2Fsaml%3ASubjectConfirmation%3E%3C%2Fsam l%3ASubject%3E%3Csaml%3AConditions NotBefore%3D%222016-05-20T08%3A31%3A07Z%22 NotOnOrAfter%3D%222016-05-20T10%3A33%3A07Z%22 %2F%3E%3Csaml%3AAuthnStatement AuthnInstant%3D%222016-05-20T09%3A32%3A07Z%22%3E%3Csaml%3AAuthnContext%3E%3C saml%3AAuthnContextClassRef%3Eurn%3Aoasis%3Anames% 3Atc%3ASAML%3A2.0%3Aac%3Aclasses%3APassword%3C%2Fs aml%3AAuthnContextClassRef%3E%3C%2Fsaml%3AAuthnCon text%3E%3C%2Fsaml%3AAuthnStatement%3E%3Csaml%3AAtt ributeStatement%3E%3Csaml%3AAttribute Name%3D%22existTVSubServiceHighestTier%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22productList%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E10102%2C10201%3C% 2Fsaml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3 E%3Csaml%3AAttribute Name%3D%22tvProductCodes%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmEbillUPI%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22LastName%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EBUTLER%3C%2Fsaml% 3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csam l%3AAttribute Name%3D%22vmPlayerLearn%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22twAccountStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EEN%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22vmLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Epjb.cleveland%40v irgin.net%3C%2Fsaml%3AAttributeValue%3E%3C%2Fsaml% 3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmHouseholdID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E108056055%3C%2Fsa ml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3C saml%3AAttribute Name%3D%22vmUserURL%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Ehttp%3A%2F%2Fhome pages.virgin.net%2Fpjb.cleveland%3C%2Fsaml%3AAttri buteValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAtt ribute Name%3D%22vmAccountID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E34119914001%3C%2F saml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E% 3Csaml%3AAttribute Name%3D%22vmAccountStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EEN%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22vmUnverifiedSSOLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmOIMProfileStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E1%3C%2Fsaml%3AAtt ributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AA ttribute Name%3D%22FirstName%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EPETER%3C%2Fsaml%3 AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml %3AAttribute Name%3D%22existTelSubServiceHighestTier%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22twSiteID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E34%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22twAccountID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E34119914001%3C%2F saml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E% 3Csaml%3AAttribute Name%3D%22vmSSOLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Epjb.cleveland%40v irgin.net%3C%2Fsaml%3AAttributeValue%3E%3C%2Fsaml% 3AAttribute%3E%3Csaml%3AAttribute Name%3D%22tierOfService%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3ET13%3C%2Fsaml%3AA ttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3 AAttribute Name%3D%22tvTierOfService%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E0%3C%2Fsaml%3AAtt ributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AA ttribute Name%3D%22vmPlayerStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmPlayerUPI%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmUserStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EEN%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22vmUserType%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EAdmin%3C%2Fsaml%3 AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml %3AAttribute Name%3D%22vmInternetCustomer%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E1%3C%2Fsaml%3AAtt ributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AA ttribute Name%3D%22bbStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EACTIVE%3C%2Fsaml% 3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csam l%3AAttribute Name%3D%22vmUnverifiedContactEmailAddress%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmUserID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E9775755%3C%2Fsaml %3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csa ml%3AAttribute Name%3D%22internetProductCodes%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EP100221%24P100421 %24P101952%24P101957%3C%2Fsaml%3AAttributeValue%3E %3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmPVRUPI%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmParentPlayerSetting%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3C%2Fsaml%3AAttrib uteStatement%3E%3C%2Fsaml%3AAssertion%3E%3C%2Fsaml p%3AResponse%3E%0D%0A
RelayState=https%3A%2F%2Fmy.virginmedia.com%2Fmy-apps%2Femail%2Fmailbox
========================================
Локальное время:20.05.2016 10:34:07
Время сессии: 00:10:55
Время отчета: 21.05.2016 09:31:59
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://mail2.virginmedia.com/ajax/saml/acs
Тип: HTTPS запрос
Размер (байты): 7 383
----------------------------------------
https://mail2.virginmedia.com/ajax/saml/acs
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: ntlWorldID=8631782291234722505; idExpire=1266258505; NGUserID=ac110328-13115-1243866266-1; sageamp=sageampPNXOJ184%7CsageampXHIDL622%7Csageam pWYKOG102%7C; camp=WYKOG102%60%601334357198000%7C; smuid=01062009-0-8238715225311243866754; inqvc=xd%3A0%5EsaleState%3AUNSOLD%5EsaleQualifiedO n%3A0%5EsoldOn%3A0%5EqualCustID%3A%5EpcState%3ADEF AULT; sageamp-770=sageampPCJWO184%7CsageampLLOEC769%7CsageampYKH OL930%7CsageampCMLNA876%7CsageampPNXOJ184%7Csageam pXHIDL622%7CsageampWTTEF799%7C; mmid=2121956839%7COAgAAAr6pjwwHgkAAA%3D%3D; __qca=P0-1251305181-1278069337109; __utma=135414574.1583735435.1324775539.1460715667. 1461232720.183; s_vi=[CS]v1|262AC71285011D95-40000103600045C2[CE]; mmcore.pd=1266256065%7CNwgAAAr6pjwwHgkAAA%3D%3D; s_cpm=%5B%5B%27DISPLAY_DR_788170%27%2C%27130574995 5828%27%5D%2C%5B%27Display_EC-Connect%27%2C%271314747192890%27%5D%2C%5B%27Portal _E5%27%2C%271324775538109%27%5D%2C%5B%27Display_EC-Connect%27%2C%271325548478796%27%5D%2C%5B%27Double Speeds_Email_2%27%2C%271326487401218%27%5D%2C%5B%2 7Portal_E5%27%2C%271337419502140%27%5D%2C%5B%27DMa il_52%27%2C%271384559701690%27%5D%2C%5B%27Direct%2 7%2C%271463736697173%27%5D%5D; mmcore.srv=ldnvwcgeu02; s_sv_112_p1=1@31@d/10718&s/13015/6056/6040&e/382; flashtalkingad1="GUID=1494831A123268|segment=(b31,b3w,bey-t:2216,dcd-m:c7_Si17,eps,e7d)"; __utmz=135414574.1461232720.183.166.utmcsr=virginm edia.com|utmccn=(referral)|utmcmd=referral|utmcct=/; s_fid=29A06495DDE95A63-2A394F218EC2F4CA; utag_main=v_id:014b4a7f4ff7000a9a24d5454b320b04100 4900d00718$_sn:626$_ss:0$_st:1463738472422$_pn:2%3 Bexp-session$ses_id:1463736672377%3Bexp-session; __gads=ID=9f7cf2dc3d2c74a4:T=1437052141:S=ALNI_MaX vqfDDsixgTZvwmTX-yKQ7ofTZQ; aam_uuid=52870022848497112414504296057018290203; mbox=PC#1450358506135-269358.21_32#1464946268|session#1463736665989-922768#1463738528; _ga=GA1.2.1583735435.1324775539; AMCV_94B35888557A99487F000101%40AdobeOrg=283337926 %7CMCAID%7C262AC71285011D95-40000103600045C2%7CMCMID%7C00660773055937795945158 234324994654089%7CMCAAMLH-1464192588%7C6%7CMCAAMB-1464192588%7Chmk_Lq6TPIBMW925SPhw3Q; cto_virginmedia=; s_nr=1463587809357; s_cc=true; gpv_pn=VME_Prospect; s_ppv=-; prop1_pn=VME%20ProspectHP; prop2_pn=ProspectHP; s_dl=1; s_cp_persist=n%2Fa; visitCheck=Customer%20Portal%20Entry; s_sq=upcvmecustomerprod%3D%2526pid%253Didentity%25 252Fvm_sso%25252Flogin-page%2526pidt%253D1%2526oid%253DSign%252520in%2526 oidt%253D3%2526ot%253DSUBMIT%26virginmediacustomer prod%3D%2526pid%253DMyVM%252520login%252520sign%25 2520in%2526pidt%253D1%2526oid%253DSign%252520in%25 26oidt%253D3%2526ot%253DSUBMIT; s_sv_sid=893858972373; sessionVerifier3="1418U3ChNrQ2Dh7TjCpkOh8K6vE2MsWxuwgI9dFBeXwg3ZCmFH gyx2byg=="; memberVerifier3="141wEHPui1MkVJ9tsT2k8vtVj8EXySpaxUcxD2JXqnLpN6eYOv H2PWck5q0zSLmJV92NAZCA/LOJ1Y="; passVerifierCookie="141TyBk2B7C625sDuvjYw3W+Q=="; GUID=5cdaa163-36c2-4435-a493-086abfac81c9; JSESSIONID=2169332831062679089.oxbe4; language=en_GB
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: identity
Screen(w:h): 1024:768
Referer: https://identity.virginmedia.com/vm_sso/idp/requestAssertion.action?SAMLRequest=fZJPT%2BMwEMXv fArL9yRuEraJ1QR1QWiRKFQ09NDLynWHYhTbXY8TsXx68ofugp B6smy%2FN34zP88uXnVNWnCorCnoJGSUgJF2p8y%2BoI%2FVdZ DRi%2FJshkLXBz5v%2FLN5gD8NoCdzRHC%2Bs11ag40GtwLXKg mPD7cFffb%2BgDyKtFB1HLbK7ZXRsFMilFZH4kW8Rn3JSEik5K orp4zwQ4SjU%2B3AeOX%2FfjO3%2Bjei7e4PkRuj%2FEsSCtkv lFxbJ2FIW9AnUSNQcnNVUJnFbJrm2TZnkEI8ydMsTfPpdppkCR PTvFPhUiCqFv77EBu4MeiF8QWN2eRHwM6DmFUs50nCz5MwzdMN JUtnvZW2%2FqnMOLzGGW4FKuRGaEDuJV%2FNF7c8DhnfjiLkv6 pqGSzvV9VQoO2adneduqAbtd9bsl6QRTdBStZHQnFPqGNmkA9M Tr9z%2BAhFy4EgH5px%2FXi08Ket%2FYnaBU%2BDlI8sPr982i 2OSGj51nfSk5tFnzKU4%2B7rnyrfAQ%3D%3D&RelayState=f1 172bd1383741ae8d86ba55f98d0b34
User input: ppainter65
POST data:
SAMLResponse=%3C%3Fxml version%3D%221.0%22 encoding%3D%22UTF-8%22%3F%3E%0D%0A%3Csamlp%3AResponse xmlns%3Asamlp%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML %3A2.0%3Aprotocol%22 xmlns%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Aassertion%22 xmlns%3Axenc%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2 F04%2Fxmlenc%23%22 ID%3D%22dkknbldhimafkpcmnjbliaiohdapmeajhmaoomia%2 2 IssueInstant%3D%222016-05-20T07%3A33%3A29Z%22 Version%3D%222.0%22%3E%3CSignature xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fx mldsig%23%22%3E%3CSignedInfo%3E%3CCanonicalization Method Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2FTR%2F2001 %2FREC-xml-c14n-20010315%23WithComments%22 %2F%3E%3CSignatureMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23dsa-sha1%22 %2F%3E%3CReference URI%3D%22%22%3E%3CTransforms%3E%3CTransform Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23enveloped-signature%22 %2F%3E%3C%2FTransforms%3E%3CDigestMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23sha1%22 %2F%3E%3CDigestValue%3E6DsYy03sMXx9RmN8MyysoMXO%2F os%3D%3C%2FDigestValue%3E%3C%2FReference%3E%3C%2FS ignedInfo%3E%3CSignatureValue%3EJwwX8sXwbj08oLt1f% 2BCNf1yvL0MbFzlDdnazpHKcZT7ZSXB5M7dAtA%3D%3D%3C%2F SignatureValue%3E%3CKeyInfo%3E%3CKeyValue%3E%3CDSA KeyValue%3E%3CP%3E%2FKaCzo4Syrom78z3EQ5SbbB4sF7ey8 0etKII864WF64B81uRpH5t9jQTxeEu0ImbzRMqzVDZkVG9%0D% 0AxD7nN1kuFw%3D%3D%3C%2FP%3E%3CQ%3Eli7dzDacuo67Jg7 mtqEm2TRuOMU%3D%3C%2FQ%3E%3CG%3EZ4Rxsnqc9E7pGknFFH 2xqaryRPBaQ01khpMdLRQnG541Awtx%2FXPaF5Bpsy4pNWMOHC BiNU0Nogps%0D%0AQW5QvnlMpA%3D%3D%3C%2FG%3E%3CY%3EV MoV%2F%2FOh7VytBbZVySNmVZevV1bw7vmJwx5hHszeR25bfor BFA19nk%2B3ehg6SgUjWiXn7Hsybemj%0D%0ARFs5x4%2BXFg% 3D%3D%3C%2FY%3E%3C%2FDSAKeyValue%3E%3C%2FKeyValue% 3E%3C%2FKeyInfo%3E%3C%2FSignature%3E%3Csamlp%3ASta tus%3E%3Csamlp%3AStatusCode Value%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Astatus%3ASuccess%22 %2F%3E%3C%2Fsamlp%3AStatus%3E%3Csaml%3AAssertion xmlns%3Asaml%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML% 3A2.0%3Aassertion%22 ID%3D%22cadkimhkabinmolgohkapehpmcfhfkppmpnkdjbj%2 2 IssueInstant%3D%222003-04-17T00%3A46%3A02Z%22 Version%3D%222.0%22%3E%3Csaml%3AIssuer%3Evirginmed ia.com%3C%2Fsaml%3AIssuer%3E%3Csaml%3ASubject%3E%3 Csaml%3ANameID Format%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Anameid-format%3AemailAddress%22%3Epjb.cleveland%40virgin. net%3C%2Fsaml%3ANameID%3E%3Csaml%3ASubjectConfirma tion Method%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Acm%3Abearer%22%3E%3Csaml%3ASubjectConfirmationDa ta Recipient%3D%22https%3A%2F%2Fmail2.virginmedia.com %2Fajax%2Fsaml%2Facs%22 %2F%3E%3C%2Fsaml%3ASubjectConfirmation%3E%3C%2Fsam l%3ASubject%3E%3Csaml%3AConditions NotBefore%3D%222016-05-20T08%3A32%3A29Z%22 NotOnOrAfter%3D%222016-05-20T10%3A34%3A29Z%22 %2F%3E%3Csaml%3AAuthnStatement AuthnInstant%3D%222016-05-20T09%3A33%3A29Z%22%3E%3Csaml%3AAuthnContext%3E%3C saml%3AAuthnContextClassRef%3Eurn%3Aoasis%3Anames% 3Atc%3ASAML%3A2.0%3Aac%3Aclasses%3APassword%3C%2Fs aml%3AAuthnContextClassRef%3E%3C%2Fsaml%3AAuthnCon text%3E%3C%2Fsaml%3AAuthnStatement%3E%3Csaml%3AAtt ributeStatement%3E%3Csaml%3AAttribute Name%3D%22vmLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Epjb.cleveland%40v irgin.net%3C%2Fsaml%3AAttributeValue%3E%3C%2Fsaml% 3AAttribute%3E%3C%2Fsaml%3AAttributeStatement%3E%3 C%2Fsaml%3AAssertion%3E%3C%2Fsamlp%3AResponse%3E%0 D%0A
RelayState=f1172bd1383741ae8d86ba55f98d0b34
========================================
Локальное время:20.05.2016 10:35:18
Время сессии: 00:12:07
Время отчета: 21.05.2016 09:32:01
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://mail2.virginmedia.com/appsuite/api/halo/contact/picture?email=egberthedge%40yahoo.com&width=40&hei ght=40&scaleType=cover&uniq=1463736854433
Тип: HTTPS запрос
Размер (байты): 3 676
----------------------------------------
https://mail2.virginmedia.com/appsuite/api/halo/contact/picture?email=egberthedge%40yahoo.com&width=40&hei ght=40&scaleType=cover&uniq=1463736854433
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: ntlWorldID=8631782291234722505; idExpire=1266258505; NGUserID=ac110328-13115-1243866266-1; sageamp=sageampPNXOJ184%7CsageampXHIDL622%7Csageam pWYKOG102%7C; camp=WYKOG102%60%601334357198000%7C; smuid=01062009-0-8238715225311243866754; inqvc=xd%3A0%5EsaleState%3AUNSOLD%5EsaleQualifiedO n%3A0%5EsoldOn%3A0%5EqualCustID%3A%5EpcState%3ADEF AULT; sageamp-770=sageampPCJWO184%7CsageampLLOEC769%7CsageampYKH OL930%7CsageampCMLNA876%7CsageampPNXOJ184%7Csageam pXHIDL622%7CsageampWTTEF799%7C; mmid=2121956839%7COAgAAAr6pjwwHgkAAA%3D%3D; __qca=P0-1251305181-1278069337109; __utma=135414574.1583735435.1324775539.1460715667. 1461232720.183; s_vi=[CS]v1|262AC71285011D95-40000103600045C2[CE]; mmcore.pd=1266256065%7CNwgAAAr6pjwwHgkAAA%3D%3D; s_cpm=%5B%5B%27DISPLAY_DR_788170%27%2C%27130574995 5828%27%5D%2C%5B%27Display_EC-Connect%27%2C%271314747192890%27%5D%2C%5B%27Portal _E5%27%2C%271324775538109%27%5D%2C%5B%27Display_EC-Connect%27%2C%271325548478796%27%5D%2C%5B%27Double Speeds_Email_2%27%2C%271326487401218%27%5D%2C%5B%2 7Portal_E5%27%2C%271337419502140%27%5D%2C%5B%27DMa il_52%27%2C%271384559701690%27%5D%2C%5B%27Direct%2 7%2C%271463736697173%27%5D%5D; mmcore.srv=ldnvwcgeu02; s_sv_112_p1=1@31@d/10718&s/13015/6056/6040&e/382; flashtalkingad1="GUID=1494831A123268|segment=(b31,b3w,bey-t:2216,dcd-m:c7_Si17,eps,e7d)"; __utmz=135414574.1461232720.183.166.utmcsr=virginm edia.com|utmccn=(referral)|utmcmd=referral|utmcct=/; s_fid=29A06495DDE95A63-2A394F218EC2F4CA; utag_main=v_id:014b4a7f4ff7000a9a24d5454b320b04100 4900d00718$_sn:626$_ss:0$_st:1463738472422$_pn:2%3 Bexp-session$ses_id:1463736672377%3Bexp-session; __gads=ID=9f7cf2dc3d2c74a4:T=1437052141:S=ALNI_MaX vqfDDsixgTZvwmTX-yKQ7ofTZQ; aam_uuid=52870022848497112414504296057018290203; mbox=PC#1450358506135-269358.21_32#1464946268|session#1463736665989-922768#1463738528; _ga=GA1.2.1583735435.1324775539; AMCV_94B35888557A99487F000101%40AdobeOrg=283337926 %7CMCAID%7C262AC71285011D95-40000103600045C2%7CMCMID%7C00660773055937795945158 234324994654089%7CMCAAMLH-1464192588%7C6%7CMCAAMB-1464192588%7Chmk_Lq6TPIBMW925SPhw3Q; cto_virginmedia=; s_nr=1463587809357; s_cc=true; gpv_pn=VME_Prospect; s_ppv=-; prop1_pn=VME%20ProspectHP; prop2_pn=ProspectHP; s_dl=1; s_cp_persist=n%2Fa; visitCheck=Customer%20Portal%20Entry; s_sq=upcvmecustomerprod%3D%2526pid%253Didentity%25 252Fvm_sso%25252Flogin-page%2526pidt%253D1%2526oid%253DSign%252520in%2526 oidt%253D3%2526ot%253DSUBMIT%26virginmediacustomer prod%3D%2526pid%253DMyVM%252520login%252520sign%25 2520in%2526pidt%253D1%2526oid%253DSign%252520in%25 26oidt%253D3%2526ot%253DSUBMIT; s_sv_sid=893858972373; sessionVerifier3="1418U3ChNrQ2Dh7TjCpkOh8K6vE2MsWxuwgI9dFBeXwg3ZCmFH gyx2byg=="; memberVerifier3="141wEHPui1MkVJ9tsT2k8vtVj8EXySpaxUcxD2JXqnLpN6eYOv H2PWck5q0zSLmJV92NAZCA/LOJ1Y="; passVerifierCookie="141TyBk2B7C625sDuvjYw3W+Q=="; GUID=5cdaa163-36c2-4435-a493-086abfac81c9; JSESSIONID=2169332831062679089.oxbe4; language=en_GB; [email protected]; open-xchange-secret-1z3TbfjXTASjQYy7t1M6w=4c5963f78bbc475fb4bf730d572f dce9; open-xchange-public-session-2b37c955ce0c9d095030b9c0d5033dee=20e725e99ef344ebb ec33c604a09edd3; open-xchange-saml-1z3TbfjXTASjQYy7t1M6w=2bae0b3af178425e8aa4af121e3a 212a; [email protected]:auth=729CAEAE5 D752B138A7BD3EC447AADD77D59EC1D:
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://mail2.virginmedia.com/appsuite/
User input: ppainter65
POST data:
*EMPTY*
========================================
Локальное время:20.05.2016 10:39:37
Время сессии: 00:16:26
Время отчета: 21.05.2016 09:32:05
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://ums.adtech.de/mapuser?providerid=1034;getuser=https://pr-bh.ybp.yahoo.com/sync/adtech/$UID?secure=true
Тип: HTTPS запрос
Размер (байты): 674
----------------------------------------
https://ums.adtech.de/mapuser?providerid=1034;getuser=https://pr-bh.ybp.yahoo.com/sync/adtech/$UID?secure=true
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: JEB2=50AABA136E6516263120204DF0102CAC; 728x90_top=UCAecWTjLrgwwQBR/acr3nJpJQW4LwPA3JiEtSoYttErL8v30FyAHmDMwgBboxzChWp xxkdBBStiTckzFUElAtEmIvhtBI12+dAk1IoqzAGWJVIABmNwm 9nOs74KZb/49IhYtNnK5Hzxr36TDPreuMFPnLjfmuUtXdvrD/fooW/PWoQJ3+; ADMARK=Fri, 20 May 2016 09:39:37 GMT
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://uk.match.com/as.php?type=dateroulette&ban=ban&position=footer
User input: ppainter65
POST data:
*EMPTY*
========================================
Локальное время:20.05.2016 10:39:50
Время сессии: 00:16:38
Время отчета: 21.05.2016 09:32:06
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://uk.match.com/ajax/event_push_profiles.php
Тип: HTTPS запрос
Размер (байты): 2 036
----------------------------------------
https://uk.match.com/ajax/event_push_profiles.php
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: ckemail=%5B%5B%2Aenc%2A%5D%5DOCsufRQcAh0IHxIfFxU8U UsvIS9iPRIE; __gads=ID=f5cefef1943e6c5b:T=1425471799:S=ALNI_Mbt SpXqG9JIvUNINd9Vefa0Zito3Q; MEETIC_USER=1; __qca=P0-402128279-1428142230909; __adal_first_visit=1428794078333; __utma=22327999.1016151309.1431598354.1438087056.1 438162486.130; _ga=GA1.3.1016151309.1431598354; grvinsights=045013414d0c24acd258623d846b8173; _ga=GA1.2.1016151309.1431598354; tk_uid=573edb24c58492.03874817; tk_uid_ts=1463737187822; cookie_signpost_2014=yes; ckemail=%5B%5B%2Aenc%2A%5D%5DOCsufRQcAh0IHxIfFxU8U UsvIS9iPRIE; __ar_v4=Y22ZR6OEORHJJGJC56MHPG%3A20160506%3A22%7CW O2X4ADDYFGGXMYLAUBJDM%3A20160506%3A22%7CWA5RGGAD2R BIRKKO5AOKD6%3A20160506%3A20; __sonar=14280085564110304371; STACK_CMK=080004; CS_CAP170344088=a%3A1%3A%7Bs%3A7%3A%22payment%22%3 Bi%3A6%3B%7D; MEETIC_HPV=080004%3B6604%3B%2Flanding%2F2016%2F03% 2F04%2Fhpv-belowthefold-video-3steps-geo-psc%3B0%3B%3Bunlogged; MEEMEMSEGENC=%5B%5B%2Aenc%2A%5D%5DJHR7Vx4eaXZ9URoF PmgDSn93dGElI09oNn1AS1E0LV0bfjZ0cVdHWmVnfABLRG9oW1 YwKzoxFEdWIH91SVMmHmgDSn93dGEOFU9oNn1HS1EMBQkJZ349 eV5fTzcgN1FKAG94AhscCmx4Hl9ZaWckGgUKd3FLA3F%2FbBoi NyZxfjRJR0l3OktcMCEhYVYWV2JxfVEiEicrS003KhoQMlRba2 d8AEtCZHAaXD0sPTceOh0yNjRRShpvegNE; MESSAGE_VIEW_COUNTER=227; meetic_cmk=080004; trackingcodeop=1000497; codeop=1000497; meetic_sessid=14__3_ac394999eda84fefe4adf5ebb022d3 62; remenc=92B0B0F44D37138FDAE2D82EFBAF80621E661E8EB82 65702ACDABAC96FA8F91FFD4FDACB1FDFA73A96903578A7104 5345C42BEE2578969B34A26D57D5F9FB8B91582F729780AD53 8B712F9B2B5AB4865; MeeticLTM=1080323594.20992.0000; ky=3605201138390145866; _dc_gtm_UA-57921838-1=1; ADRUM_BT=R%3A39%7CclientRequestGUID%3Ab14c3003-e140-4cf2-bb9e-97b8ca0a7d6092%7CbtId%3A2984%7CbtDuration%3A217%7C btERT%3A138
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: identity
Screen(w:h): 1024:768
Referer: https://uk.match.com/search/visit.phtml
User input: ppainter65
POST data:
aref=600436589
events%5B%5D=score
========================================
Локальное время:20.05.2016 10:58:57
Время сессии: 00:08:33
Время отчета: 21.05.2016 09:32:07
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://identity.virginmedia.com/vm_sso/idp/login.action
Тип: HTTPS запрос
Размер (байты): 3 651
----------------------------------------
https://identity.virginmedia.com/vm_sso/idp/login.action
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: sso.test.cookie=1; JSESSIONID=67F5BA34512AB16517F37FDAB6BADAA0; sageamp=sageampXHIDL622%7C; 1stTV=yes; m1stTV=yes; ntlWorldID=8631782291234722505; idExpire=1266258505; NGUserID=ac110328-13115-1243866266-1; sageamp=sageampPNXOJ184%7CsageampXHIDL622%7Csageam pWYKOG102%7C; camp=WYKOG102%60%601334357198000%7C; smuid=01062009-0-8238715225311243866754; inqvc=xd%3A0%5EsaleState%3AUNSOLD%5EsaleQualifiedO n%3A0%5EsoldOn%3A0%5EqualCustID%3A%5EpcState%3ADEF AULT; sageamp-770=sageampPCJWO184%7CsageampLLOEC769%7CsageampYKH OL930%7CsageampCMLNA876%7CsageampPNXOJ184%7Csageam pXHIDL622%7CsageampWTTEF799%7C; mmid=2121956839%7COAgAAAr6pjwwHgkAAA%3D%3D; __qca=P0-1251305181-1278069337109; __utma=135414574.1583735435.1324775539.1460715667. 1461232720.183; s_vi=[CS]v1|262AC71285011D95-40000103600045C2[CE]; mmcore.pd=1266256065%7CNwgAAAr6pjwwHgkAAA%3D%3D; s_cpm=%5B%5B%27DISPLAY_DR_788170%27%2C%27130574995 5828%27%5D%2C%5B%27Display_EC-Connect%27%2C%271314747192890%27%5D%2C%5B%27Portal _E5%27%2C%271324775538109%27%5D%2C%5B%27Display_EC-Connect%27%2C%271325548478796%27%5D%2C%5B%27Double Speeds_Email_2%27%2C%271326487401218%27%5D%2C%5B%2 7Portal_E5%27%2C%271337419502140%27%5D%2C%5B%27DMa il_52%27%2C%271384559701690%27%5D%2C%5B%27Direct%2 7%2C%271463736697173%27%5D%5D; mmcore.srv=ldnvwcgeu02; s_sv_112_p1=1@31@d/10718&s/13015/6056/6040&e/382; flashtalkingad1="GUID=1494831A123268|segment=(b31,b3w,bey-t:2216,dcd-m:c7_Si17,eps,e7d)"; __utmz=135414574.1461232720.183.166.utmcsr=virginm edia.com|utmccn=(referral)|utmcmd=referral|utmcct=/; s_fid=29A06495DDE95A63-2A394F218EC2F4CA; utag_main=v_id:014b4a7f4ff7000a9a24d5454b320b04100 4900d00718$_sn:626$_ss:0$_st:1463740104313$_pn:3%3 Bexp-session$ses_id:1463736672377%3Bexp-session; __gads=ID=9f7cf2dc3d2c74a4:T=1437052141:S=ALNI_MaX vqfDDsixgTZvwmTX-yKQ7ofTZQ; aam_uuid=52870022848497112414504296057018290203; mbox=PC#1450358506135-269358.21_32#1464947889|session#1463736665989-922768#1463740149; _ga=GA1.2.1583735435.1324775539; AMCV_94B35888557A99487F000101%40AdobeOrg=283337926 %7CMCAID%7C262AC71285011D95-40000103600045C2%7CMCMID%7C00660773055937795945158 234324994654089%7CMCAAMLH-1464192588%7C6%7CMCAAMB-1464192588%7Chmk_Lq6TPIBMW925SPhw3Q; cto_virginmedia=; s_nr=1463587809357; gpv_pn=VME_Prospect; prop1_pn=VME%20ProspectHP; prop2_pn=ProspectHP; s_dl=1; visitCheck=Customer%20Portal%20Entry; s_cc=true; s_ppv=-; s_sq=upcvmecustomerprod%3D%2526pid%253Didentity%25 252Fvm_sso%25252Flogin-page%2526pidt%253D1%2526oid%253DSign%252520in%2526 oidt%253D3%2526ot%253DSUBMIT%26virginmediacustomer prod%3D%2526pid%253DMyVM%252520login%252520sign%25 2520in%2526pidt%253D1%2526oid%253DSign%252520in%25 26oidt%253D3%2526ot%253DSUBMIT; s_sv_sid=586163948736
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://identity.virginmedia.com/vm_sso/idp/requestAssertion.action?SAMLRequest=eJx9kc1OwzAQhF 8l8j0%2FjSgqVp2qgBCVWhSVtAdujrPEVmI7eJ0I3p60oVLhwM GHtXfGs98uV5%2B6%0D%0ADQZwqKxhZBYlJAAjbKVMzciheAoX ZJUtkeu2o%2BveS7OHjx7QB6POID0%2FMNI7Qy1HhdRwDUi9oK %2Fr%0D%0A3ZamUUI7Z70VtiXBGhGcHz96sAZ7De4V3KAEHPZb RqT3HdI41l%2FRoFytjIZK8UhYHXOBp0OCzSMj%0D%0AWmhZmq qFrimlMHUFUohSdE1trJK8bMum6WTVjN2Yc0Q1ACPvvEU43WAP G4OeG89Imsxuw2QepkmR%0D%0A3NH5gt6kbyTIf%2BLeKzNB%2 BDNbdD1bOTUhfS6KPNyPiR0IfzYZVAXuZVQwctzl1nk%2BEjhe QI9iMmGl%0D%0A51Duiuf%2FOPkFIskuvsv4yiibqt%2Fbyr4B Hoqq6A%3D%3D%0D%0A&RelayState=https%3A%2F%2Fmy.vir ginmedia.com%2Fmy-apps%2Femail%2Fmailbox
User input: p painter65
POST data:
username=pjb.cleveland%40virgin.net
password=painter65
jsEnabled=true
========================================
Локальное время:20.05.2016 10:59:03
Время сессии: 00:08:38
Время отчета: 21.05.2016 09:32:10
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://my.virginmedia.com/acs/acs
Тип: HTTPS запрос
Размер (байты): 18 507
----------------------------------------
https://my.virginmedia.com/acs/acs
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: sageamp=sageampRORRX553sageampUIBUE463sageampPCJWO 184%7CsageampEMA5UBAH%7CsageampEMA5UBAHsageampDVXO J884sageampPNXOJ184%7CsageampXHIDL622; 1stTV=yes; m1stTV=yes; ntlWorldID=8631782291234722505; idExpire=1266258505; NGUserID=ac110328-13115-1243866266-1; sageamp=sageampPNXOJ184%7CsageampXHIDL622%7Csageam pWYKOG102%7C; camp=WYKOG102%60%601334357198000%7C; smuid=01062009-0-8238715225311243866754; inqvc=xd%3A0%5EsaleState%3AUNSOLD%5EsaleQualifiedO n%3A0%5EsoldOn%3A0%5EqualCustID%3A%5EpcState%3ADEF AULT; sageamp-770=sageampPCJWO184%7CsageampLLOEC769%7CsageampYKH OL930%7CsageampCMLNA876%7CsageampPNXOJ184%7Csageam pXHIDL622%7CsageampWTTEF799%7C; mmid=2121956839%7COAgAAAr6pjwwHgkAAA%3D%3D; __qca=P0-1251305181-1278069337109; __utma=135414574.1583735435.1324775539.1460715667. 1461232720.183; s_vi=[CS]v1|262AC71285011D95-40000103600045C2[CE]; mmcore.pd=1266256065%7CNwgAAAr6pjwwHgkAAA%3D%3D; s_cpm=%5B%5B%27DISPLAY_DR_788170%27%2C%27130574995 5828%27%5D%2C%5B%27Display_EC-Connect%27%2C%271314747192890%27%5D%2C%5B%27Portal _E5%27%2C%271324775538109%27%5D%2C%5B%27Display_EC-Connect%27%2C%271325548478796%27%5D%2C%5B%27Double Speeds_Email_2%27%2C%271326487401218%27%5D%2C%5B%2 7Portal_E5%27%2C%271337419502140%27%5D%2C%5B%27DMa il_52%27%2C%271384559701690%27%5D%2C%5B%27Direct%2 7%2C%271463736697173%27%5D%5D; mmcore.srv=ldnvwcgeu02; s_sv_112_p1=1@31@d/10718&s/13015/6056/6040&e/382; flashtalkingad1="GUID=1494831A123268|segment=(b31,b3w,bey-t:2216,dcd-m:c7_Si17,eps,e7d)"; __utmz=135414574.1461232720.183.166.utmcsr=virginm edia.com|utmccn=(referral)|utmcmd=referral|utmcct=/; ecos=582381161-1444991620; s_fid=29A06495DDE95A63-2A394F218EC2F4CA; utag_main=v_id:014b4a7f4ff7000a9a24d5454b320b04100 4900d00718$_sn:626$_ss:0$_st:1463740104313$_pn:3%3 Bexp-session$ses_id:1463736672377%3Bexp-session; __gads=ID=9f7cf2dc3d2c74a4:T=1437052141:S=ALNI_MaX vqfDDsixgTZvwmTX-yKQ7ofTZQ; aam_uuid=52870022848497112414504296057018290203; mbox=PC#1450358506135-269358.21_32#1464947889|session#1463736665989-922768#1463740149; _ga=GA1.2.1583735435.1324775539; AMCV_94B35888557A99487F000101%40AdobeOrg=283337926 %7CMCAID%7C262AC71285011D95-40000103600045C2%7CMCMID%7C00660773055937795945158 234324994654089%7CMCAAMLH-1464192588%7C6%7CMCAAMB-1464192588%7Chmk_Lq6TPIBMW925SPhw3Q; cto_virginmedia=; s_nr=1463587809357; gpv_pn=VME_Prospect; prop1_pn=VME%20ProspectHP; prop2_pn=ProspectHP; s_dl=1; visitCheck=Customer%20Portal%20Entry; s_cc=true; s_ppv=-; s_sq=upcvmecustomerprod%3D%2526pid%253Didentity%25 252Fvm_sso%25252Flogin-page%2526pidt%253D1%2526oid%253DSign%252520in%2526 oidt%253D3%2526ot%253DSUBMIT%26virginmediacustomer prod%3D%2526pid%253DMyVM%252520login%252520sign%25 2520in%2526pidt%253D1%2526oid%253DSign%252520in%25 26oidt%253D3%2526ot%253DSUBMIT; s_sv_sid=586163948736; sessionVerifier3="1418U3ChNrQ2Dgok1p5h/QXVdUFb6E8qsKdw7EfrNJK7Q5nsoZGAySTEA=="; memberVerifier3="141wEHPui1MkVJ9tsT2k8vtVj8EXySpaxUcxD2JXqnLpN6eYOv H2PWck5q0zSLmJV92NAZCA/LOJ1Y="
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://identity.virginmedia.com/vm_sso/idp/login.action
User input: p painter65
POST data:
SAMLResponse=%3C%3Fxml version%3D%221.0%22 encoding%3D%22UTF-8%22%3F%3E%0D%0A%3Csamlp%3AResponse xmlns%3Asamlp%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML %3A2.0%3Aprotocol%22 xmlns%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Aassertion%22 xmlns%3Axenc%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2 F04%2Fxmlenc%23%22 ID%3D%22oikfhejgookhmkgpnajdhfalkfagoglodgdddlmb%2 2 IssueInstant%3D%222016-05-20T07%3A59%3A02Z%22 Version%3D%222.0%22%3E%3CSignature xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fx mldsig%23%22%3E%3CSignedInfo%3E%3CCanonicalization Method Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2FTR%2F2001 %2FREC-xml-c14n-20010315%23WithComments%22 %2F%3E%3CSignatureMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23dsa-sha1%22 %2F%3E%3CReference URI%3D%22%22%3E%3CTransforms%3E%3CTransform Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23enveloped-signature%22 %2F%3E%3C%2FTransforms%3E%3CDigestMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23sha1%22 %2F%3E%3CDigestValue%3Ep4lcC4iN5DISh0VDBkEF8Qrgxz0 %3D%3C%2FDigestValue%3E%3C%2FReference%3E%3C%2FSig nedInfo%3E%3CSignatureValue%3Ebk5R778qMOa58Wug8Oeh 8IddlH4BPGbOILTtEluypsNNCivvv%2FE2rw%3D%3D%3C%2FSi gnatureValue%3E%3CKeyInfo%3E%3CKeyValue%3E%3CDSAKe yValue%3E%3CP%3E%2FKaCzo4Syrom78z3EQ5SbbB4sF7ey80e tKII864WF64B81uRpH5t9jQTxeEu0ImbzRMqzVDZkVG9%0D%0A xD7nN1kuFw%3D%3D%3C%2FP%3E%3CQ%3Eli7dzDacuo67Jg7mt qEm2TRuOMU%3D%3C%2FQ%3E%3CG%3EZ4Rxsnqc9E7pGknFFH2x qaryRPBaQ01khpMdLRQnG541Awtx%2FXPaF5Bpsy4pNWMOHCBi NU0Nogps%0D%0AQW5QvnlMpA%3D%3D%3C%2FG%3E%3CY%3EVMo V%2F%2FOh7VytBbZVySNmVZevV1bw7vmJwx5hHszeR25bforBF A19nk%2B3ehg6SgUjWiXn7Hsybemj%0D%0ARFs5x4%2BXFg%3D %3D%3C%2FY%3E%3C%2FDSAKeyValue%3E%3C%2FKeyValue%3E %3C%2FKeyInfo%3E%3C%2FSignature%3E%3Csamlp%3AStatu s%3E%3Csamlp%3AStatusCode Value%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Astatus%3ASuccess%22 %2F%3E%3C%2Fsamlp%3AStatus%3E%3Csaml%3AAssertion xmlns%3Asaml%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML% 3A2.0%3Aassertion%22 ID%3D%22pmcfilmeknlgkcjkdhbicmbggmffkogijepgojch%2 2 IssueInstant%3D%222003-04-17T00%3A46%3A02Z%22 Version%3D%222.0%22%3E%3Csaml%3AIssuer%3Evirginmed ia.com%3C%2Fsaml%3AIssuer%3E%3Csaml%3ASubject%3E%3 Csaml%3ANameID Format%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Anameid-format%3AemailAddress%22%3Epjb.cleveland%40virgin. net%3C%2Fsaml%3ANameID%3E%3Csaml%3ASubjectConfirma tion Method%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Acm%3Abearer%22%3E%3Csaml%3ASubjectConfirmationDa ta Recipient%3D%22https%3A%2F%2Fmy.virginmedia.com%2F acs%2Facs%22 %2F%3E%3C%2Fsaml%3ASubjectConfirmation%3E%3C%2Fsam l%3ASubject%3E%3Csaml%3AConditions NotBefore%3D%222016-05-20T08%3A58%3A02Z%22 NotOnOrAfter%3D%222016-05-20T11%3A00%3A02Z%22 %2F%3E%3Csaml%3AAuthnStatement AuthnInstant%3D%222016-05-20T09%3A59%3A02Z%22%3E%3Csaml%3AAuthnContext%3E%3C saml%3AAuthnContextClassRef%3Eurn%3Aoasis%3Anames% 3Atc%3ASAML%3A2.0%3Aac%3Aclasses%3APassword%3C%2Fs aml%3AAuthnContextClassRef%3E%3C%2Fsaml%3AAuthnCon text%3E%3C%2Fsaml%3AAuthnStatement%3E%3Csaml%3AAtt ributeStatement%3E%3Csaml%3AAttribute Name%3D%22existTVSubServiceHighestTier%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22productList%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E10102%2C10201%3C% 2Fsaml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3 E%3Csaml%3AAttribute Name%3D%22tvProductCodes%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmEbillUPI%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22LastName%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EBUTLER%3C%2Fsaml% 3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csam l%3AAttribute Name%3D%22vmPlayerLearn%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22twAccountStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EEN%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22vmLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Epjb.cleveland%40v irgin.net%3C%2Fsaml%3AAttributeValue%3E%3C%2Fsaml% 3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmHouseholdID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E108056055%3C%2Fsa ml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3C saml%3AAttribute Name%3D%22vmUserURL%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Ehttp%3A%2F%2Fhome pages.virgin.net%2Fpjb.cleveland%3C%2Fsaml%3AAttri buteValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAtt ribute Name%3D%22vmAccountID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E34119914001%3C%2F saml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E% 3Csaml%3AAttribute Name%3D%22vmAccountStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EEN%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22vmUnverifiedSSOLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmOIMProfileStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E1%3C%2Fsaml%3AAtt ributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AA ttribute Name%3D%22FirstName%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EPETER%3C%2Fsaml%3 AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml %3AAttribute Name%3D%22existTelSubServiceHighestTier%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22twSiteID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E34%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22twAccountID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E34119914001%3C%2F saml%3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E% 3Csaml%3AAttribute Name%3D%22vmSSOLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Epjb.cleveland%40v irgin.net%3C%2Fsaml%3AAttributeValue%3E%3C%2Fsaml% 3AAttribute%3E%3Csaml%3AAttribute Name%3D%22tierOfService%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3ET13%3C%2Fsaml%3AA ttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3 AAttribute Name%3D%22tvTierOfService%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E0%3C%2Fsaml%3AAtt ributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AA ttribute Name%3D%22vmPlayerStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmPlayerUPI%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmUserStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EEN%3C%2Fsaml%3AAt tributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3A Attribute Name%3D%22vmUserType%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EAdmin%3C%2Fsaml%3 AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml %3AAttribute Name%3D%22vmInternetCustomer%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E1%3C%2Fsaml%3AAtt ributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AA ttribute Name%3D%22bbStatus%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EACTIVE%3C%2Fsaml% 3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csam l%3AAttribute Name%3D%22vmUnverifiedContactEmailAddress%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmUserID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3E9775755%3C%2Fsaml %3AAttributeValue%3E%3C%2Fsaml%3AAttribute%3E%3Csa ml%3AAttribute Name%3D%22internetProductCodes%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3EP100221%24P100421 %24P101952%24P101957%3C%2Fsaml%3AAttributeValue%3E %3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmPVRUPI%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3Csaml%3AAttribute Name%3D%22vmParentPlayerSetting%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22 %2F%3E%3C%2Fsaml%3AAttribute%3E%3C%2Fsaml%3AAttrib uteStatement%3E%3C%2Fsaml%3AAssertion%3E%3C%2Fsaml p%3AResponse%3E%0D%0A
RelayState=https%3A%2F%2Fmy.virginmedia.com%2Fmy-apps%2Femail%2Fmailbox
========================================
Локальное время:20.05.2016 10:59:38
Время сессии: 00:09:13
Время отчета: 21.05.2016 09:32:11
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://mail2.virginmedia.com/ajax/saml/acs
Тип: HTTPS запрос
Размер (байты): 7 353
----------------------------------------
https://mail2.virginmedia.com/ajax/saml/acs
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: ntlWorldID=8631782291234722505; idExpire=1266258505; NGUserID=ac110328-13115-1243866266-1; sageamp=sageampPNXOJ184%7CsageampXHIDL622%7Csageam pWYKOG102%7C; camp=WYKOG102%60%601334357198000%7C; smuid=01062009-0-8238715225311243866754; inqvc=xd%3A0%5EsaleState%3AUNSOLD%5EsaleQualifiedO n%3A0%5EsoldOn%3A0%5EqualCustID%3A%5EpcState%3ADEF AULT; sageamp-770=sageampPCJWO184%7CsageampLLOEC769%7CsageampYKH OL930%7CsageampCMLNA876%7CsageampPNXOJ184%7Csageam pXHIDL622%7CsageampWTTEF799%7C; mmid=2121956839%7COAgAAAr6pjwwHgkAAA%3D%3D; __qca=P0-1251305181-1278069337109; __utma=135414574.1583735435.1324775539.1460715667. 1461232720.183; s_vi=[CS]v1|262AC71285011D95-40000103600045C2[CE]; mmcore.pd=1266256065%7CNwgAAAr6pjwwHgkAAA%3D%3D; s_cpm=%5B%5B%27DISPLAY_DR_788170%27%2C%27130574995 5828%27%5D%2C%5B%27Display_EC-Connect%27%2C%271314747192890%27%5D%2C%5B%27Portal _E5%27%2C%271324775538109%27%5D%2C%5B%27Display_EC-Connect%27%2C%271325548478796%27%5D%2C%5B%27Double Speeds_Email_2%27%2C%271326487401218%27%5D%2C%5B%2 7Portal_E5%27%2C%271337419502140%27%5D%2C%5B%27DMa il_52%27%2C%271384559701690%27%5D%2C%5B%27Direct%2 7%2C%271463736697173%27%5D%5D; mmcore.srv=ldnvwcgeu02; s_sv_112_p1=1@31@d/10718&s/13015/6056/6040&e/382; flashtalkingad1="GUID=1494831A123268|segment=(b31,b3w,bey-t:2216,dcd-m:c7_Si17,eps,e7d)"; __utmz=135414574.1461232720.183.166.utmcsr=virginm edia.com|utmccn=(referral)|utmcmd=referral|utmcct=/; s_fid=29A06495DDE95A63-2A394F218EC2F4CA; utag_main=v_id:014b4a7f4ff7000a9a24d5454b320b04100 4900d00718$_sn:626$_ss:0$_st:1463740104313$_pn:3%3 Bexp-session$ses_id:1463736672377%3Bexp-session; __gads=ID=9f7cf2dc3d2c74a4:T=1437052141:S=ALNI_MaX vqfDDsixgTZvwmTX-yKQ7ofTZQ; aam_uuid=52870022848497112414504296057018290203; mbox=PC#1450358506135-269358.21_32#1464947889|session#1463736665989-922768#1463740149; _ga=GA1.2.1583735435.1324775539; AMCV_94B35888557A99487F000101%40AdobeOrg=283337926 %7CMCAID%7C262AC71285011D95-40000103600045C2%7CMCMID%7C00660773055937795945158 234324994654089%7CMCAAMLH-1464192588%7C6%7CMCAAMB-1464192588%7Chmk_Lq6TPIBMW925SPhw3Q; cto_virginmedia=; s_nr=1463587809357; gpv_pn=VME_Prospect; prop1_pn=VME%20ProspectHP; prop2_pn=ProspectHP; s_dl=1; visitCheck=Customer%20Portal%20Entry; s_cc=true; s_ppv=-; s_sq=upcvmecustomerprod%3D%2526pid%253Didentity%25 252Fvm_sso%25252Flogin-page%2526pidt%253D1%2526oid%253DSign%252520in%2526 oidt%253D3%2526ot%253DSUBMIT%26virginmediacustomer prod%3D%2526pid%253DMyVM%252520login%252520sign%25 2520in%2526pidt%253D1%2526oid%253DSign%252520in%25 26oidt%253D3%2526ot%253DSUBMIT; s_sv_sid=586163948736; sessionVerifier3="1418U3ChNrQ2Dgok1p5h/QXVdUFb6E8qsKdw7EfrNJK7Q5nsoZGAySTEA=="; memberVerifier3="141wEHPui1MkVJ9tsT2k8vtVj8EXySpaxUcxD2JXqnLpN6eYOv H2PWck5q0zSLmJV92NAZCA/LOJ1Y="; passVerifierCookie="141TyBk2B7C625sDuvjYw3W+Q=="; GUID=33fa9f4b-b486-49b9-96f9-3aea12e0fc2b; JSESSIONID=7582421823371727120.oxbe1; language=en_GB
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://identity.virginmedia.com/vm_sso/idp/requestAssertion.action?SAMLRequest=fZLLTsMwEEX3fI XlfRKTppRYTVABIZAoVDSwYINcZ1qMYrt4nAj4evKgPITUlWX7 3vGdOZ6evOmKNOBQWZPRw5BRAkbaUplNRu%2BLi%2BCYnuQHUx S62vJZ7Z%2FNHbzWgJ7MEMH51nZmDdYa3BJcoyTc311n9Nn7Lf Io0kJVcdgot1FGQ6lEKK2OxIt4i7qSkZBIyXlbThnh%2Bwg7py rBeOXf%2F5kb%2FYRo2%2Ftt5IYo30lCIbuFkgvrJPRpM7oWFQ IlV%2BcZTWJIx8k6ARmzZC2ZSFdyUk6SdDJaHSejUavChUBUDf z4EGu4MuiF8RmN2eFRwMZBzAqW8nHKR2kYs%2FEjJQtnvZW2Ol VmGF7tDLcCFXIjNCD3ki9n82seh4yvBhHyy6JYBIvbZdEXaNqm 3U2rzuij2mwseZiTeTtBSh52hOKOUMvMIO%2BZ7H9n%2BxWK5j 1B3jfjuvFo4fdbuxNVButeygcWv1%2Fe7xY7JDT%2F6DrpyE2j XxnyYff3T%2BWf&RelayState=f3f9198f56eb4034b2820585 4666d3bb
User input: p painter65
POST data:
SAMLResponse=%3C%3Fxml version%3D%221.0%22 encoding%3D%22UTF-8%22%3F%3E%0D%0A%3Csamlp%3AResponse xmlns%3Asamlp%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML %3A2.0%3Aprotocol%22 xmlns%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Aassertion%22 xmlns%3Axenc%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2 F04%2Fxmlenc%23%22 ID%3D%22hpafjigfoealiejfhekfhngdlifiljfopelkjpcl%2 2 IssueInstant%3D%222016-05-20T07%3A59%3A39Z%22 Version%3D%222.0%22%3E%3CSignature xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fx mldsig%23%22%3E%3CSignedInfo%3E%3CCanonicalization Method Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2FTR%2F2001 %2FREC-xml-c14n-20010315%23WithComments%22 %2F%3E%3CSignatureMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23dsa-sha1%22 %2F%3E%3CReference URI%3D%22%22%3E%3CTransforms%3E%3CTransform Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23enveloped-signature%22 %2F%3E%3C%2FTransforms%3E%3CDigestMethod Algorithm%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F09 %2Fxmldsig%23sha1%22 %2F%3E%3CDigestValue%3EbrzwU3bleAylXZIs2eEdTZco4Hs %3D%3C%2FDigestValue%3E%3C%2FReference%3E%3C%2FSig nedInfo%3E%3CSignatureValue%3EFNwbIQHxAmQSRtWUZxMc 1ILw%2FvGTdXkIi1J%2B92X3ykUmBWaTHELD%2BQ%3D%3D%3C% 2FSignatureValue%3E%3CKeyInfo%3E%3CKeyValue%3E%3CD SAKeyValue%3E%3CP%3E%2FKaCzo4Syrom78z3EQ5SbbB4sF7e y80etKII864WF64B81uRpH5t9jQTxeEu0ImbzRMqzVDZkVG9%0 D%0AxD7nN1kuFw%3D%3D%3C%2FP%3E%3CQ%3Eli7dzDacuo67J g7mtqEm2TRuOMU%3D%3C%2FQ%3E%3CG%3EZ4Rxsnqc9E7pGknF FH2xqaryRPBaQ01khpMdLRQnG541Awtx%2FXPaF5Bpsy4pNWMO HCBiNU0Nogps%0D%0AQW5QvnlMpA%3D%3D%3C%2FG%3E%3CY%3 EVMoV%2F%2FOh7VytBbZVySNmVZevV1bw7vmJwx5hHszeR25bf orBFA19nk%2B3ehg6SgUjWiXn7Hsybemj%0D%0ARFs5x4%2BXF g%3D%3D%3C%2FY%3E%3C%2FDSAKeyValue%3E%3C%2FKeyValu e%3E%3C%2FKeyInfo%3E%3C%2FSignature%3E%3Csamlp%3AS tatus%3E%3Csamlp%3AStatusCode Value%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3 Astatus%3ASuccess%22 %2F%3E%3C%2Fsamlp%3AStatus%3E%3Csaml%3AAssertion xmlns%3Asaml%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML% 3A2.0%3Aassertion%22 ID%3D%22cojkbjbbndfigihlcgagjdmdljkbolnpgppdegcb%2 2 IssueInstant%3D%222003-04-17T00%3A46%3A02Z%22 Version%3D%222.0%22%3E%3Csaml%3AIssuer%3Evirginmed ia.com%3C%2Fsaml%3AIssuer%3E%3Csaml%3ASubject%3E%3 Csaml%3ANameID Format%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Anameid-format%3AemailAddress%22%3Epjb.cleveland%40virgin. net%3C%2Fsaml%3ANameID%3E%3Csaml%3ASubjectConfirma tion Method%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0% 3Acm%3Abearer%22%3E%3Csaml%3ASubjectConfirmationDa ta Recipient%3D%22https%3A%2F%2Fmail2.virginmedia.com %2Fajax%2Fsaml%2Facs%22 %2F%3E%3C%2Fsaml%3ASubjectConfirmation%3E%3C%2Fsam l%3ASubject%3E%3Csaml%3AConditions NotBefore%3D%222016-05-20T08%3A58%3A39Z%22 NotOnOrAfter%3D%222016-05-20T11%3A00%3A39Z%22 %2F%3E%3Csaml%3AAuthnStatement AuthnInstant%3D%222016-05-20T09%3A59%3A39Z%22%3E%3Csaml%3AAuthnContext%3E%3C saml%3AAuthnContextClassRef%3Eurn%3Aoasis%3Anames% 3Atc%3ASAML%3A2.0%3Aac%3Aclasses%3APassword%3C%2Fs aml%3AAuthnContextClassRef%3E%3C%2Fsaml%3AAuthnCon text%3E%3C%2Fsaml%3AAuthnStatement%3E%3Csaml%3AAtt ributeStatement%3E%3Csaml%3AAttribute Name%3D%22vmLoginID%22 NameFormat%3D%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A 2.0%3Aattrname-format%3Abasic%22%3E%3Csaml%3AAttributeValue xmlns%3Axs%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FX MLSchema%22 xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2F XMLSchema-instance%22 xsi%3Atype%3D%22xs%3Astring%22%3Epjb.cleveland%40v irgin.net%3C%2Fsaml%3AAttributeValue%3E%3C%2Fsaml% 3AAttribute%3E%3C%2Fsaml%3AAttributeStatement%3E%3 C%2Fsaml%3AAssertion%3E%3C%2Fsamlp%3AResponse%3E%0 D%0A
RelayState=f3f9198f56eb4034b28205854666d3bb
========================================
Локальное время:20.05.2016 10:59:55
Время сессии: 00:09:30
Время отчета: 21.05.2016 09:32:11
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://mail2.virginmedia.com/appsuite/api/halo/contact/picture?email=egberthedge%40yahoo.com&width=40&hei ght=40&scaleType=cover&uniq=1463738381066
Тип: HTTPS запрос
Размер (байты): 3 657
----------------------------------------
https://mail2.virginmedia.com/appsuite/api/halo/contact/picture?email=egberthedge%40yahoo.com&width=40&hei ght=40&scaleType=cover&uniq=1463738381066
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: ntlWorldID=8631782291234722505; idExpire=1266258505; NGUserID=ac110328-13115-1243866266-1; sageamp=sageampPNXOJ184%7CsageampXHIDL622%7Csageam pWYKOG102%7C; camp=WYKOG102%60%601334357198000%7C; smuid=01062009-0-8238715225311243866754; inqvc=xd%3A0%5EsaleState%3AUNSOLD%5EsaleQualifiedO n%3A0%5EsoldOn%3A0%5EqualCustID%3A%5EpcState%3ADEF AULT; sageamp-770=sageampPCJWO184%7CsageampLLOEC769%7CsageampYKH OL930%7CsageampCMLNA876%7CsageampPNXOJ184%7Csageam pXHIDL622%7CsageampWTTEF799%7C; mmid=2121956839%7COAgAAAr6pjwwHgkAAA%3D%3D; __qca=P0-1251305181-1278069337109; __utma=135414574.1583735435.1324775539.1460715667. 1461232720.183; s_vi=[CS]v1|262AC71285011D95-40000103600045C2[CE]; mmcore.pd=1266256065%7CNwgAAAr6pjwwHgkAAA%3D%3D; s_cpm=%5B%5B%27DISPLAY_DR_788170%27%2C%27130574995 5828%27%5D%2C%5B%27Display_EC-Connect%27%2C%271314747192890%27%5D%2C%5B%27Portal _E5%27%2C%271324775538109%27%5D%2C%5B%27Display_EC-Connect%27%2C%271325548478796%27%5D%2C%5B%27Double Speeds_Email_2%27%2C%271326487401218%27%5D%2C%5B%2 7Portal_E5%27%2C%271337419502140%27%5D%2C%5B%27DMa il_52%27%2C%271384559701690%27%5D%2C%5B%27Direct%2 7%2C%271463736697173%27%5D%5D; mmcore.srv=ldnvwcgeu02; s_sv_112_p1=1@31@d/10718&s/13015/6056/6040&e/382; flashtalkingad1="GUID=1494831A123268|segment=(b31,b3w,bey-t:2216,dcd-m:c7_Si17,eps,e7d)"; __utmz=135414574.1461232720.183.166.utmcsr=virginm edia.com|utmccn=(referral)|utmcmd=referral|utmcct=/; s_fid=29A06495DDE95A63-2A394F218EC2F4CA; utag_main=v_id:014b4a7f4ff7000a9a24d5454b320b04100 4900d00718$_sn:626$_ss:0$_st:1463740104313$_pn:3%3 Bexp-session$ses_id:1463736672377%3Bexp-session; __gads=ID=9f7cf2dc3d2c74a4:T=1437052141:S=ALNI_MaX vqfDDsixgTZvwmTX-yKQ7ofTZQ; aam_uuid=52870022848497112414504296057018290203; mbox=PC#1450358506135-269358.21_32#1464947889|session#1463736665989-922768#1463740149; _ga=GA1.2.1583735435.1324775539; AMCV_94B35888557A99487F000101%40AdobeOrg=283337926 %7CMCAID%7C262AC71285011D95-40000103600045C2%7CMCMID%7C00660773055937795945158 234324994654089%7CMCAAMLH-1464192588%7C6%7CMCAAMB-1464192588%7Chmk_Lq6TPIBMW925SPhw3Q; cto_virginmedia=; s_nr=1463587809357; gpv_pn=VME_Prospect; prop1_pn=VME%20ProspectHP; prop2_pn=ProspectHP; s_dl=1; visitCheck=Customer%20Portal%20Entry; s_cc=true; s_ppv=-; s_sq=upcvmecustomerprod%3D%2526pid%253Didentity%25 252Fvm_sso%25252Flogin-page%2526pidt%253D1%2526oid%253DSign%252520in%2526 oidt%253D3%2526ot%253DSUBMIT%26virginmediacustomer prod%3D%2526pid%253DMyVM%252520login%252520sign%25 2520in%2526pidt%253D1%2526oid%253DSign%252520in%25 26oidt%253D3%2526ot%253DSUBMIT; s_sv_sid=586163948736; sessionVerifier3="1418U3ChNrQ2Dgok1p5h/QXVdUFb6E8qsKdw7EfrNJK7Q5nsoZGAySTEA=="; memberVerifier3="141wEHPui1MkVJ9tsT2k8vtVj8EXySpaxUcxD2JXqnLpN6eYOv H2PWck5q0zSLmJV92NAZCA/LOJ1Y="; passVerifierCookie="141TyBk2B7C625sDuvjYw3W+Q=="; GUID=33fa9f4b-b486-49b9-96f9-3aea12e0fc2b; JSESSIONID=7582421823371727120.oxbe1; language=en_GB; [email protected]; open-xchange-secret-1z3TbfjXTASjQYy7t1M6w=ec48c731e2c2446e8d07e5764271 63b8; open-xchange-public-session-2b37c955ce0c9d095030b9c0d5033dee=63eefb8e11d74669a b401b5c529f45a3; open-xchange-saml-1z3TbfjXTASjQYy7t1M6w=d082ce8d6c0b404e9e2173d7fd41 178d; [email protected]:auth=729CAEAE5 D752B138A7BD3EC447AADD77D59EC1D:
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://mail2.virginmedia.com/appsuite/
User input: p painter65
POST data:
*EMPTY*
========================================
Локальное время:20.05.2016 11:02:27
Время сессии: 00:12:03
Время отчета: 21.05.2016 09:32:16
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://uk.match.com/ajax/event_push_profiles.php
Тип: HTTPS запрос
Размер (байты): 2 020
----------------------------------------
https://uk.match.com/ajax/event_push_profiles.php
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: ckemail=%5B%5B%2Aenc%2A%5D%5DOCsufRQcAh0IHxIfFxU8U UsvIS9iPRIE; __gads=ID=f5cefef1943e6c5b:T=1425471799:S=ALNI_Mbt SpXqG9JIvUNINd9Vefa0Zito3Q; MEETIC_USER=1; __qca=P0-402128279-1428142230909; __adal_first_visit=1428794078333; __utma=22327999.1016151309.1431598354.1438087056.1 438162486.130; _ga=GA1.3.1016151309.1431598354; grvinsights=045013414d0c24acd258623d846b8173; _ga=GA1.2.1016151309.1431598354; tk_uid=573edb24c58492.03874817; tk_uid_ts=1463738545882; cookie_signpost_2014=yes; ckemail=%5B%5B%2Aenc%2A%5D%5DOCsufRQcAh0IHxIfFxU8U UsvIS9iPRIE; __ar_v4=Y22ZR6OEORHJJGJC56MHPG%3A20160506%3A22%7CW O2X4ADDYFGGXMYLAUBJDM%3A20160506%3A22%7CWA5RGGAD2R BIRKKO5AOKD6%3A20160506%3A20; __sonar=14280085564110304371; STACK_CMK=080004; CS_CAP170344088=a%3A1%3A%7Bs%3A7%3A%22payment%22%3 Bi%3A6%3B%7D; MEETIC_HPV=080004%3B6604%3B%2Flanding%2F2016%2F03% 2F04%2Fhpv-belowthefold-video-3steps-geo-psc%3B0%3B%3Bunlogged; MEEMEMSEGENC=%5B%5B%2Aenc%2A%5D%5DJHR7Vx4eaXZ9URoF PmgDSn93dGElI09oNn1AS1E0LV0bfjZ0cVdHWmVnfABLRG9oW1 YwKzoxFEdWIH91SVMmHmgDSn93dGEOFU9oNn1HS1EMBQkJZ349 eV5fTzcgN1FKAG94AhscCmx4Hl9ZaWckGgUKd3FLA3F%2FbBoi NyZxfjRJR0l3OktcMCEhYVYWV2JxfVEiEicrS003KhoQMlRba2 d8AEtCZHAaXD0sPTceOh0yNjRRShpvegNE; MESSAGE_VIEW_COUNTER=228; MeeticLTM=1080323594.20992.0000; meetic_cmk=080004; trackingcodeop=4002032; codeop=4002032; meetic_sessid=14__3_3c0e1a00a6c97004013af893649b73 e1; remenc=92B0B0F44D37138FDAE2D82EFBAF80621E661E8EB82 65702ACDABAC96FA8F91FFD4FDACB1FDFA73A96903578A7104 5345C42BEE2578969B34A26D57D5F9FB8B91582F729780AD53 8B712F9B2B5AB4865; ky=3605201202180142310; ADRUM_BT=R%3A37%7CclientRequestGUID%3Af56fd254-741b-4936-91e5-dec9dc167ab4169%7CbtId%3A2984%7CbtDuration%3A204%7 CbtERT%3A168
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://uk.match.com/search/visit.php
User input: p painter65
POST data:
aref=660998582
events%5B%5D=score
========================================
Локальное время:20.05.2016 11:02:38
Время сессии: 00:12:13
Время отчета: 21.05.2016 09:32:18
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://uk.match.com/ajax/search/refresh.php
Тип: HTTPS запрос
Размер (байты): 2 146
----------------------------------------
https://uk.match.com/ajax/search/refresh.php
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:46.0) Gecko/20100101 Firefox/46.0
Cookie: ckemail=%5B%5B%2Aenc%2A%5D%5DOCsufRQcAh0IHxIfFxU8U UsvIS9iPRIE; __gads=ID=f5cefef1943e6c5b:T=1425471799:S=ALNI_Mbt SpXqG9JIvUNINd9Vefa0Zito3Q; MEETIC_USER=1; __qca=P0-402128279-1428142230909; __adal_first_visit=1428794078333; __utma=22327999.1016151309.1431598354.1438087056.1 438162486.130; _ga=GA1.3.1016151309.1431598354; grvinsights=045013414d0c24acd258623d846b8173; _ga=GA1.2.1016151309.1431598354; tk_uid=573edb24c58492.03874817; tk_uid_ts=1463738547860; cookie_signpost_2014=yes; ckemail=%5B%5B%2Aenc%2A%5D%5DOCsufRQcAh0IHxIfFxU8U UsvIS9iPRIE; __ar_v4=Y22ZR6OEORHJJGJC56MHPG%3A20160506%3A22%7CW O2X4ADDYFGGXMYLAUBJDM%3A20160506%3A22%7CWA5RGGAD2R BIRKKO5AOKD6%3A20160506%3A20; __sonar=14280085564110304371; STACK_CMK=080004; CS_CAP170344088=a%3A1%3A%7Bs%3A7%3A%22payment%22%3 Bi%3A6%3B%7D; MEETIC_HPV=080004%3B6604%3B%2Flanding%2F2016%2F03% 2F04%2Fhpv-belowthefold-video-3steps-geo-psc%3B0%3B%3Bunlogged; MEEMEMSEGENC=%5B%5B%2Aenc%2A%5D%5DJHR7Vx4eaXZ9URoF PmgDSn93dGElI09oNn1AS1E0LV0bfjZ0cVdHWmVnfABLRG9oW1 YwKzoxFEdWIH91SVMmHmgDSn93dGEOFU9oNn1HS1EMBQkJZ349 eV5fTzcgN1FKAG94AhscCmx4Hl9ZaWckGgUKd3FLA3F%2FbBoi NyZxfjRJR0l3OktcMCEhYVYWV2JxfVEiEicrS003KhoQMlRba2 d8AEtCZHAaXD0sPTceOh0yNjRRShpvegNE; MESSAGE_VIEW_COUNTER=228; MeeticLTM=1080323594.20992.0000; meetic_cmk=080004; trackingcodeop=4002032; codeop=4002032; meetic_sessid=14__3_3c0e1a00a6c97004013af893649b73 e1; remenc=92B0B0F44D37138FDAE2D82EFBAF80621E661E8EB82 65702ACDABAC96FA8F91FFD4FDACB1FDFA73A96903578A7104 5345C42BEE2578969B34A26D57D5F9FB8B91582F729780AD53 8B712F9B2B5AB4865; ky=3605201202180142310; ADRUM_BT=R%3A37%7CclientRequestGUID%3Af56fd254-741b-4936-91e5-dec9dc167ab4169%7CbtId%3A2984%7CbtDuration%3A204%7 CbtERT%3A168
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate, br
Screen(w:h): 1024:768
Referer: https://uk.match.com/search/visit.php
User input: p painter65
POST data:
is_infinite_scroll=1
meeticmain=undefined
results_no_header=1
meeticmain=undefined
ref=VIEW.12.690440651_2016-05-17T16%3A58%3A35_1
meeticmain=undefined
inf_scroll=1
========================================
Локальное время:20.05.2016 11:03:04
Время сессии: 00:12:39
Время отчета: 21.05.2016 09:32:18
Процесс: C:\Program Files\Mozilla Firefox\firefox.exe
Информация о процессе:Mozilla Corporation | Firefox | 46.0.1
Источник: https://ums.adtech.de/mapuser?providerid=1034;getuser=https://pr-bh.ybp.yahoo.com/sync/adtech/$UID?secure=true
Тип: HTTPS запрос
Размер (байты): 670
Добавлено через 3 минуты 33 секунды
Code:
========================================
Локальное время:17.05.2016 17:02:13
Время сессии: 00:39:55
Время отчета: 22.05.2016 00:41:27
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=779728247
Тип: HTTP запрос
Размер (байты): 1 889
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=779728247
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463518930993
User input:
POST data:
video%5Fdesc=
position=263
video%5Fasset%5Furl=
video%5Fid=
PlatformVendor=Microsoft
segment=
page%5Fhost=web%2Eitibitiphone%2Ecom
content%5Furl=
video%5Fheight=
BrowserVersion=7%2E0
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
IP=104%2E136%2E229%2E64
video%5Fwidth=
city=Tampa
postalCode=33695
longitude=%2D82%2E4584
region=FL
IsTablet=False
BrowserVendor=Microsoft
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
area%5Fcode=
HCPM=8%2E50
page%5Fdomain=itibitiphone%2Ecom
PlatformName=Windows
HardwareVendor=Unknown
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246538%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
BrowserName=Internet%20Explorer
PlatformVersion=7
v=4%2E5
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
countryCode=US
sw=441
sh=260
HardwareModel=Unknown
countryName=United%20States
age=
partnerID=k456n785c785t
metro%5Fcode=539
age%5Frange=
regionName=Florida
IsMobile=False
gender=
latitude=27%2E9475
video%5Ftitle=
wb%5Fmarkup=0%2E01
video%5Furl=
========================================
Локальное время:17.05.2016 17:02:13
Время сессии: 00:39:56
Время отчета: 22.05.2016 00:41:28
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=779728247& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246538%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 994
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=779728247& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246538%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463518930993
User input:
POST data:
position=263
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
content%5Furl=
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
id=65ac6368%2Dbbf2%2D421d%2Db8c6%2Dc74b8f28acce
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:02:22
Время сессии: 00:40:04
Время отчета: 22.05.2016 00:41:30
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=779728247& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246538%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 003
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=779728247& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246538%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463518930993
User input:
POST data:
position=263
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
content%5Furl=
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=7939
age=
age%5Frange=
id=65ac6368%2Dbbf2%2D421d%2Db8c6%2Dc74b8f28acce
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:02:30
Время сессии: 00:40:12
Время отчета: 22.05.2016 00:41:30
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=779728247& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246538%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 002
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=779728247& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246538%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463518930993
User input:
POST data:
position=263
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
content%5Furl=
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=8711
age=
age%5Frange=
id=65ac6368%2Dbbf2%2D421d%2Db8c6%2Dc74b8f28acce
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:02:30
Время сессии: 00:40:12
Время отчета: 22.05.2016 00:41:31
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=77 9728247&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 63&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 571
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=77 9728247&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 63&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463518930993
User input:
POST data:
TimeStrAd=18384
Advertiser%5FID=yu2142016knc
========================================
Локальное время:17.05.2016 17:03:03
Время сессии: 00:40:45
Время отчета: 22.05.2016 00:41:33
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=779728247&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=263&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 613
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=779728247&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=263&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463518930993
User input:
POST data:
campaign%5Fid=%7C
tracking%5Fid=65ac6368%2Dbbf2%2D421d%2Db8c6%2Dc74b 8f28acce
Advertiser%5FID=yu2142016knc
========================================
Локальное время:17.05.2016 17:04:32
Время сессии: 00:42:14
Время отчета: 22.05.2016 00:41:34
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463519072083
Тип: HTTP запрос
Размер (байты): 1 069
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463519072083
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519071242
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=264
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246536%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:04:33
Время сессии: 00:42:15
Время отчета: 22.05.2016 00:41:34
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=972387828
Тип: HTTP запрос
Размер (байты): 1 886
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=972387828
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519071242
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
IsTablet=False
PlatformVendor=Microsoft
video%5Fheight=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
postalCode=33695
video%5Fdesc=
PlatformName=Windows
region=FL
countryName=United%20States
wb%5Fmarkup=0%2E01
HCPM=8%2E50
page%5Fdomain=itibitiphone%2Ecom
BrowserVendor=Microsoft
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
position=264
HardwareVendor=Unknown
city=Tampa
partnerID=k456n785c785t
regionName=Florida
IP=104%2E136%2E229%2E64
longitude=%2D82%2E4584
BrowserName=Internet%20Explorer
PlatformVersion=7
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246536%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0
v=4%2E5
IsMobile=False
sw=441
area%5Fcode=
sh=260
latitude=27%2E9475
age=
BrowserVersion=7%2E0
HardwareModel=Unknown
video%5Furl=
metro%5Fcode=539
gender=
video%5Ftitle=
countryCode=US
========================================
Локальное время:17.05.2016 17:04:34
Время сессии: 00:42:16
Время отчета: 22.05.2016 00:41:35
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=972387828& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246536%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
Тип: HTTP запрос
Размер (байты): 991
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=972387828& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246536%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519071242
User input:
POST data:
id=3f491c9b%2Dec58%2D4fd4%2D9e84%2Dc3260294018c
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=264
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:04:37
Время сессии: 00:42:19
Время отчета: 22.05.2016 00:41:35
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=972387828& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246536%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
Тип: HTTP запрос
Размер (байты): 1 000
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=972387828& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246536%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519071242
User input:
POST data:
id=3f491c9b%2Dec58%2D4fd4%2D9e84%2Dc3260294018c
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=264
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2855
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:04:43
Время сессии: 00:42:25
Время отчета: 22.05.2016 00:41:36
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=972387828& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246536%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
Тип: HTTP запрос
Размер (байты): 999
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=972387828& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246536%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519071242
User input:
POST data:
id=3f491c9b%2Dec58%2D4fd4%2D9e84%2Dc3260294018c
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=264
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=6516
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:04:43
Время сессии: 00:42:25
Время отчета: 22.05.2016 00:41:36
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=97 2387828&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 64&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 571
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=97 2387828&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 64&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519071242
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=10902
========================================
Локальное время:17.05.2016 17:05:15
Время сессии: 00:42:57
Время отчета: 22.05.2016 00:41:36
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=972387828&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=264&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 613
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=972387828&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=264&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 1600:900
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519071242
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=3f491c9b%2Dec58%2D4fd4%2D9e84%2Dc326 0294018c
========================================
Локальное время:17.05.2016 17:17:14
Время сессии: 00:54:56
Время отчета: 22.05.2016 00:41:37
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463519834030
Тип: HTTP запрос
Размер (байты): 1 071
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463519834030
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519833236
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=265
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246530%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:17:15
Время сессии: 00:54:57
Время отчета: 22.05.2016 00:41:37
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=376777861
Тип: HTTP запрос
Размер (байты): 1 888
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=376777861
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519833236
User input:
POST data:
video%5Furl=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
HardwareVendor=Unknown
video%5Fdesc=
video%5Fheight=
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
PlatformVersion=7
postalCode=33695
position=265
age%5Frange=
region=FL
countryName=United%20States
IP=104%2E136%2E229%2E64
BrowserName=Internet%20Explorer
regionName=Florida
PlatformName=Windows
HardwareModel=Unknown
area%5Fcode=
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
metro%5Fcode=539
partnerID=k456n785c785t
wb%5Fmarkup=0%2E01
IsMobile=False
HCPM=8%2E50
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246530%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
v=4%2E5
IsTablet=False
PlatformVendor=Microsoft
countryCode=US
sw=441
sh=260
latitude=27%2E9475
age=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
city=Tampa
page%5Fdomain=itibitiphone%2Ecom
gender=
BrowserVersion=7%2E0
BrowserVendor=Microsoft
video%5Ftitle=
longitude=%2D82%2E4584
========================================
Локальное время:17.05.2016 17:17:17
Время сессии: 00:54:59
Время отчета: 22.05.2016 00:41:38
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=376777861& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246530%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 993
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=376777861& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246530%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519833236
User input:
POST data:
id=6bdb2706%2D72e0%2D47d1%2Da2b5%2Dd117fa463a79
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=265
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:17:20
Время сессии: 00:55:02
Время отчета: 22.05.2016 00:41:38
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=376777861& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246530%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 002
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=376777861& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246530%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519833236
User input:
POST data:
id=6bdb2706%2D72e0%2D47d1%2Da2b5%2Dd117fa463a79
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=265
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2673
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:17:26
Время сессии: 00:55:08
Время отчета: 22.05.2016 00:41:38
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=376777861& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246530%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 001
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=376777861& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246530%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519833236
User input:
POST data:
id=6bdb2706%2D72e0%2D47d1%2Da2b5%2Dd117fa463a79
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=265
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=6468
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:17:26
Время сессии: 00:55:08
Время отчета: 22.05.2016 00:41:39
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=37 6777861&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 65&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 570
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=37 6777861&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 65&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519833236
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=12410
========================================
Локальное время:17.05.2016 17:17:59
Время сессии: 00:55:41
Время отчета: 22.05.2016 00:41:39
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=376777861&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=265&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 612
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=376777861&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=265&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519833236
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=6bdb2706%2D72e0%2D47d1%2Da2b5%2Dd117 fa463a79
========================================
Локальное время:17.05.2016 17:19:49
Время сессии: 00:57:31
Время отчета: 22.05.2016 00:41:39
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463519989289
Тип: HTTP запрос
Размер (байты): 1 068
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463519989289
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519988486
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=266
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246528%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:19:50
Время сессии: 00:57:32
Время отчета: 22.05.2016 00:41:40
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=249583230
Тип: HTTP запрос
Размер (байты): 1 885
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=249583230
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519988486
User input:
POST data:
video%5Furl=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
HardwareVendor=Unknown
video%5Fdesc=
video%5Fheight=
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
PlatformVersion=7
postalCode=33695
position=266
age%5Frange=
region=FL
countryName=United%20States
IP=104%2E136%2E229%2E64
BrowserName=Internet%20Explorer
regionName=Florida
PlatformName=Windows
HardwareModel=Unknown
area%5Fcode=
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
metro%5Fcode=539
partnerID=k456n785c785t
wb%5Fmarkup=0%2E01
IsMobile=False
HCPM=8%2E50
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246528%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0
v=4%2E5
IsTablet=False
PlatformVendor=Microsoft
countryCode=US
sw=441
sh=260
latitude=27%2E9475
age=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
city=Tampa
page%5Fdomain=itibitiphone%2Ecom
gender=
BrowserVersion=7%2E0
BrowserVendor=Microsoft
video%5Ftitle=
longitude=%2D82%2E4584
========================================
Локальное время:17.05.2016 17:19:51
Время сессии: 00:57:33
Время отчета: 22.05.2016 00:41:40
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=249583230& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246528%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
Тип: HTTP запрос
Размер (байты): 990
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=249583230& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246528%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519988486
User input:
POST data:
id=2f453f04%2D08b6%2D4b9d%2D94f5%2Dfd8ca0b3f337
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=266
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:19:54
Время сессии: 00:57:36
Время отчета: 22.05.2016 00:41:41
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=249583230& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246528%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
Тип: HTTP запрос
Размер (байты): 999
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=249583230& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246528%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519988486
User input:
POST data:
id=2f453f04%2D08b6%2D4b9d%2D94f5%2Dfd8ca0b3f337
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=266
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2852
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:20:00
Время сессии: 00:57:42
Время отчета: 22.05.2016 00:41:41
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=249583230& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246528%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
Тип: HTTP запрос
Размер (байты): 998
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=249583230& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246528%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519988486
User input:
POST data:
id=2f453f04%2D08b6%2D4b9d%2D94f5%2Dfd8ca0b3f337
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=266
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=6476
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:20:00
Время сессии: 00:57:42
Время отчета: 22.05.2016 00:41:42
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=24 9583230&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 66&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 570
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=24 9583230&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 66&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519988486
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=10908
========================================
Локальное время:17.05.2016 17:20:33
Время сессии: 00:58:15
Время отчета: 22.05.2016 00:41:42
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=249583230&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=266&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 612
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=249583230&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=266&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463519988486
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=2f453f04%2D08b6%2D4b9d%2D94f5%2Dfd8c a0b3f337
========================================
Локальное время:17.05.2016 17:22:22
Время сессии: 01:00:04
Время отчета: 22.05.2016 00:41:42
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520142276
Тип: HTTP запрос
Размер (байты): 1 071
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520142276
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520141487
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=267
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246502%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:22:23
Время сессии: 01:00:05
Время отчета: 22.05.2016 00:41:43
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=373607670
Тип: HTTP запрос
Размер (байты): 1 888
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=373607670
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520141487
User input:
POST data:
video%5Furl=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
HardwareVendor=Unknown
video%5Fdesc=
video%5Fheight=
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
PlatformVersion=7
postalCode=33695
position=267
age%5Frange=
region=FL
countryName=United%20States
IP=104%2E136%2E229%2E64
BrowserName=Internet%20Explorer
regionName=Florida
PlatformName=Windows
HardwareModel=Unknown
area%5Fcode=
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
metro%5Fcode=539
partnerID=k456n785c785t
wb%5Fmarkup=0%2E01
IsMobile=False
HCPM=8%2E50
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246502%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
v=4%2E5
IsTablet=False
PlatformVendor=Microsoft
countryCode=US
sw=441
sh=260
latitude=27%2E9475
age=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
city=Tampa
page%5Fdomain=itibitiphone%2Ecom
gender=
BrowserVersion=7%2E0
BrowserVendor=Microsoft
video%5Ftitle=
longitude=%2D82%2E4584
========================================
Локальное время:17.05.2016 17:22:24
Время сессии: 01:00:06
Время отчета: 22.05.2016 00:41:43
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=373607670& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246502%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 993
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=373607670& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246502%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520141487
User input:
POST data:
id=ec030070%2De817%2D4df2%2Db6a1%2Dd2d3fc6e0f4b
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=267
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:22:27
Время сессии: 01:00:09
Время отчета: 22.05.2016 00:41:44
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=373607670& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246502%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 002
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=373607670& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246502%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520141487
User input:
POST data:
id=ec030070%2De817%2D4df2%2Db6a1%2Dd2d3fc6e0f4b
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=267
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2848
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:22:33
Время сессии: 01:00:15
Время отчета: 22.05.2016 00:41:44
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=373607670& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246502%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 001
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=373607670& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246502%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520141487
User input:
POST data:
id=ec030070%2De817%2D4df2%2Db6a1%2Dd2d3fc6e0f4b
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=267
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=6462
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:22:33
Время сессии: 01:00:15
Время отчета: 22.05.2016 00:41:44
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=37 3607670&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 67&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 570
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=37 3607670&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 67&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520141487
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=10907
========================================
Локальное время:17.05.2016 17:23:06
Время сессии: 01:00:48
Время отчета: 22.05.2016 00:41:45
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=373607670&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=267&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 612
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=373607670&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=267&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520141487
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=ec030070%2De817%2D4df2%2Db6a1%2Dd2d3 fc6e0f4b
========================================
Локальное время:17.05.2016 17:24:11
Время сессии: 01:01:53
Время отчета: 22.05.2016 00:41:45
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520251028
Тип: HTTP запрос
Размер (байты): 1 071
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520251028
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520250240
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=268
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246498%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:24:12
Время сессии: 01:01:54
Время отчета: 22.05.2016 00:41:45
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=966696254
Тип: HTTP запрос
Размер (байты): 1 888
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=966696254
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520250240
User input:
POST data:
video%5Furl=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
HardwareVendor=Unknown
video%5Fdesc=
video%5Fheight=
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
PlatformVersion=7
postalCode=33695
position=268
age%5Frange=
region=FL
countryName=United%20States
IP=104%2E136%2E229%2E64
BrowserName=Internet%20Explorer
regionName=Florida
PlatformName=Windows
HardwareModel=Unknown
area%5Fcode=
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
metro%5Fcode=539
partnerID=k456n785c785t
wb%5Fmarkup=0%2E01
IsMobile=False
HCPM=8%2E50
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246498%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
v=4%2E5
IsTablet=False
PlatformVendor=Microsoft
countryCode=US
sw=441
sh=260
latitude=27%2E9475
age=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
city=Tampa
page%5Fdomain=itibitiphone%2Ecom
gender=
BrowserVersion=7%2E0
BrowserVendor=Microsoft
video%5Ftitle=
longitude=%2D82%2E4584
========================================
Локальное время:17.05.2016 17:24:13
Время сессии: 01:01:55
Время отчета: 22.05.2016 00:41:46
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=966696254& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246498%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 993
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=966696254& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246498%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520250240
User input:
POST data:
id=b4e2dbea%2Dfa11%2D488f%2D9bae%2D316caaa2ba36
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=268
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:24:16
Время сессии: 01:01:58
Время отчета: 22.05.2016 00:41:47
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=966696254& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246498%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 002
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=966696254& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246498%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520250240
User input:
POST data:
id=b4e2dbea%2Dfa11%2D488f%2D9bae%2D316caaa2ba36
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=268
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2712
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:24:23
Время сессии: 01:02:05
Время отчета: 22.05.2016 00:41:47
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=966696254& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246498%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 001
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=966696254& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246498%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520250240
User input:
POST data:
id=b4e2dbea%2Dfa11%2D488f%2D9bae%2D316caaa2ba36
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=268
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=8127
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:24:23
Время сессии: 01:02:05
Время отчета: 22.05.2016 00:41:49
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=96 6696254&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 68&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 570
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=96 6696254&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 68&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520250240
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=12570
========================================
Локальное время:17.05.2016 17:24:56
Время сессии: 01:02:38
Время отчета: 22.05.2016 00:41:49
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=966696254&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=268&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 612
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=966696254&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=268&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520250240
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=b4e2dbea%2Dfa11%2D488f%2D9bae%2D316c aaa2ba36
========================================
Локальное время:17.05.2016 17:26:42
Время сессии: 01:04:24
Время отчета: 22.05.2016 00:41:50
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520401548
Тип: HTTP запрос
Размер (байты): 1 068
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520401548
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520400732
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=269
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246496%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:26:42
Время сессии: 01:04:25
Время отчета: 22.05.2016 00:41:52
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=306414570
Тип: HTTP запрос
Размер (байты): 1 885
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=306414570
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520400732
User input:
POST data:
video%5Furl=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
HardwareVendor=Unknown
video%5Fdesc=
video%5Fheight=
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
PlatformVersion=7
postalCode=33695
position=269
age%5Frange=
region=FL
countryName=United%20States
IP=104%2E136%2E229%2E64
BrowserName=Internet%20Explorer
regionName=Florida
PlatformName=Windows
HardwareModel=Unknown
area%5Fcode=
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
metro%5Fcode=539
partnerID=k456n785c785t
wb%5Fmarkup=0%2E01
IsMobile=False
HCPM=8%2E50
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246496%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0
v=4%2E5
IsTablet=False
PlatformVendor=Microsoft
countryCode=US
sw=441
sh=260
latitude=27%2E9475
age=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
city=Tampa
page%5Fdomain=itibitiphone%2Ecom
gender=
BrowserVersion=7%2E0
BrowserVendor=Microsoft
video%5Ftitle=
longitude=%2D82%2E4584
========================================
Локальное время:17.05.2016 17:26:43
Время сессии: 01:04:25
Время отчета: 22.05.2016 00:41:52
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=306414570& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246496%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
Тип: HTTP запрос
Размер (байты): 990
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=306414570& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246496%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520400732
User input:
POST data:
id=53aa9f3d%2D7581%2D4797%2D9844%2D8ba3ea64af40
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=269
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:26:46
Время сессии: 01:04:28
Время отчета: 22.05.2016 00:41:53
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=306414570& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246496%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
Тип: HTTP запрос
Размер (байты): 999
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=306414570& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246496%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520400732
User input:
POST data:
id=53aa9f3d%2D7581%2D4797%2D9844%2D8ba3ea64af40
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=269
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2851
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:26:55
Время сессии: 01:04:37
Время отчета: 22.05.2016 00:41:55
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=306414570& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246496%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
Тип: HTTP запрос
Размер (байты): 998
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=306414570& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246496%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520400732
User input:
POST data:
id=53aa9f3d%2D7581%2D4797%2D9844%2D8ba3ea64af40
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=269
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=9476
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:26:55
Время сессии: 01:04:37
Время отчета: 22.05.2016 00:41:55
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=30 6414570&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 69&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 570
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=30 6414570&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 69&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520400732
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=13895
========================================
Локальное время:17.05.2016 17:27:28
Время сессии: 01:05:10
Время отчета: 22.05.2016 00:41:56
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=306414570&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=269&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 612
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=306414570&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=269&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520400732
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=53aa9f3d%2D7581%2D4797%2D9844%2D8ba3 ea64af40
========================================
Локальное время:17.05.2016 17:28:42
Время сессии: 01:06:24
Время отчета: 22.05.2016 00:41:58
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520521778
Тип: HTTP запрос
Размер (байты): 1 071
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520521778
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520520991
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=270
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246494%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:28:43
Время сессии: 01:06:25
Время отчета: 22.05.2016 00:41:58
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=768613441
Тип: HTTP запрос
Размер (байты): 1 888
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=768613441
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520520991
User input:
POST data:
age%5Frange=
content%5Furl=
area%5Fcode=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
IsTablet=False
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
page%5Fhost=web%2Eitibitiphone%2Ecom
postalCode=33695
position=270
region=FL
PlatformVendor=Microsoft
PlatformName=Windows
regionName=Florida
HCPM=8%2E50
page%5Fdomain=itibitiphone%2Ecom
BrowserVendor=Microsoft
countryName=United%20States
metro%5Fcode=539
HardwareVendor=Unknown
wb%5Fmarkup=0%2E01
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246494%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
BrowserName=Internet%20Explorer
PlatformVersion=7
v=4%2E5
partnerID=k456n785c785t
city=Tampa
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
countryCode=US
sw=441
IsMobile=False
sh=260
latitude=27%2E9475
age=
longitude=%2D82%2E4584
video%5Furl=
BrowserVersion=7%2E0
HardwareModel=Unknown
gender=
video%5Ftitle=
IP=104%2E136%2E229%2E64
========================================
Локальное время:17.05.2016 17:28:43
Время сессии: 01:06:26
Время отчета: 22.05.2016 00:41:59
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=768613441& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246494%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 993
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=768613441& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246494%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520520991
User input:
POST data:
id=2ba682c3%2Df02e%2D4198%2Da3ab%2Dd8821b589a39
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=270
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:28:46
Время сессии: 01:06:28
Время отчета: 22.05.2016 00:42:01
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=768613441& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246494%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 002
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=768613441& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246494%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520520991
User input:
POST data:
id=2ba682c3%2Df02e%2D4198%2Da3ab%2Dd8821b589a39
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=270
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2851
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:28:52
Время сессии: 01:06:34
Время отчета: 22.05.2016 00:42:02
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=768613441& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246494%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 001
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=768613441& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246494%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520520991
User input:
POST data:
id=2ba682c3%2Df02e%2D4198%2Da3ab%2Dd8821b589a39
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=270
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=6459
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:28:52
Время сессии: 01:06:34
Время отчета: 22.05.2016 00:42:02
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=76 8613441&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 70&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 570
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=76 8613441&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 70&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520520991
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=10900
========================================
Локальное время:17.05.2016 17:29:25
Время сессии: 01:07:07
Время отчета: 22.05.2016 00:42:03
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=768613441&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=270&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 612
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=768613441&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=270&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520520991
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=2ba682c3%2Df02e%2D4198%2Da3ab%2Dd882 1b589a39
========================================
Локальное время:17.05.2016 17:30:36
Время сессии: 01:08:19
Время отчета: 22.05.2016 00:42:03
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520636291
Тип: HTTP запрос
Размер (байты): 1 071
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520636291
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520635494
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=271
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246492%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:30:37
Время сессии: 01:08:19
Время отчета: 22.05.2016 00:42:04
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=336254379
Тип: HTTP запрос
Размер (байты): 1 888
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=336254379
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520635494
User input:
POST data:
video%5Furl=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
HardwareVendor=Unknown
video%5Fdesc=
video%5Fheight=
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
PlatformVersion=7
postalCode=33695
position=271
age%5Frange=
region=FL
countryName=United%20States
IP=104%2E136%2E229%2E64
BrowserName=Internet%20Explorer
regionName=Florida
PlatformName=Windows
HardwareModel=Unknown
area%5Fcode=
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
metro%5Fcode=539
partnerID=k456n785c785t
wb%5Fmarkup=0%2E01
IsMobile=False
HCPM=8%2E50
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246492%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
v=4%2E5
IsTablet=False
PlatformVendor=Microsoft
countryCode=US
sw=441
sh=260
latitude=27%2E9475
age=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
city=Tampa
page%5Fdomain=itibitiphone%2Ecom
gender=
BrowserVersion=7%2E0
BrowserVendor=Microsoft
video%5Ftitle=
longitude=%2D82%2E4584
========================================
Локальное время:17.05.2016 17:30:38
Время сессии: 01:08:20
Время отчета: 22.05.2016 00:42:04
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=336254379& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246492%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 993
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=336254379& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246492%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520635494
User input:
POST data:
id=6e42d5c8%2D40d3%2D42d3%2D8072%2D1cb317c48811
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=271
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:30:41
Время сессии: 01:08:23
Время отчета: 22.05.2016 00:42:04
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=336254379& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246492%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 002
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=336254379& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246492%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520635494
User input:
POST data:
id=6e42d5c8%2D40d3%2D42d3%2D8072%2D1cb317c48811
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=271
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2862
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:30:47
Время сессии: 01:08:29
Время отчета: 22.05.2016 00:42:05
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=336254379& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246492%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 001
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=336254379& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246492%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520635494
User input:
POST data:
id=6e42d5c8%2D40d3%2D42d3%2D8072%2D1cb317c48811
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=271
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=6471
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:30:47
Время сессии: 01:08:29
Время отчета: 22.05.2016 00:42:05
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=33 6254379&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 71&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 570
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=33 6254379&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 71&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520635494
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=10906
========================================
Локальное время:17.05.2016 17:31:20
Время сессии: 01:09:02
Время отчета: 22.05.2016 00:42:06
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=336254379&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=271&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 612
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=336254379&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=271&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520635494
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=6e42d5c8%2D40d3%2D42d3%2D8072%2D1cb3 17c48811
========================================
Локальное время:17.05.2016 17:34:04
Время сессии: 01:11:46
Время отчета: 22.05.2016 00:42:06
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520843530
Тип: HTTP запрос
Размер (байты): 1 071
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520843530
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520842737
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=272
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246488%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:34:04
Время сессии: 01:11:47
Время отчета: 22.05.2016 00:42:06
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=414632636
Тип: HTTP запрос
Размер (байты): 1 888
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=414632636
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520842737
User input:
POST data:
video%5Furl=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
HardwareVendor=Unknown
video%5Fdesc=
video%5Fheight=
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
PlatformVersion=7
postalCode=33695
position=272
age%5Frange=
region=FL
countryName=United%20States
IP=104%2E136%2E229%2E64
BrowserName=Internet%20Explorer
regionName=Florida
PlatformName=Windows
HardwareModel=Unknown
area%5Fcode=
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
metro%5Fcode=539
partnerID=k456n785c785t
wb%5Fmarkup=0%2E01
IsMobile=False
HCPM=8%2E50
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246488%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
v=4%2E5
IsTablet=False
PlatformVendor=Microsoft
countryCode=US
sw=441
sh=260
latitude=27%2E9475
age=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
city=Tampa
page%5Fdomain=itibitiphone%2Ecom
gender=
BrowserVersion=7%2E0
BrowserVendor=Microsoft
video%5Ftitle=
longitude=%2D82%2E4584
========================================
Локальное время:17.05.2016 17:34:05
Время сессии: 01:11:47
Время отчета: 22.05.2016 00:42:07
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=414632636& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246488%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 993
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=414632636& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246488%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520842737
User input:
POST data:
id=26493a3a%2D2a8a%2D4a45%2Da578%2Dfc23b37111e5
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=272
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:34:08
Время сессии: 01:11:50
Время отчета: 22.05.2016 00:42:07
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=414632636& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246488%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 002
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=414632636& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246488%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520842737
User input:
POST data:
id=26493a3a%2D2a8a%2D4a45%2Da578%2Dfc23b37111e5
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=272
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2845
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:34:15
Время сессии: 01:11:57
Время отчета: 22.05.2016 00:42:08
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=414632636& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246488%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 001
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=414632636& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246488%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520842737
User input:
POST data:
id=26493a3a%2D2a8a%2D4a45%2Da578%2Dfc23b37111e5
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=272
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=7220
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:34:15
Время сессии: 01:11:57
Время отчета: 22.05.2016 00:42:08
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=41 4632636&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 72&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 570
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=41 4632636&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 72&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520842737
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=11667
========================================
Локальное время:17.05.2016 17:34:48
Время сессии: 01:12:30
Время отчета: 22.05.2016 00:42:08
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=414632636&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=272&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 612
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=414632636&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=272&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520842737
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=26493a3a%2D2a8a%2D4a45%2Da578%2Dfc23 b37111e5
========================================
Локальное время:17.05.2016 17:35:48
Время сессии: 01:13:30
Время отчета: 22.05.2016 00:42:09
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520948038
Тип: HTTP запрос
Размер (байты): 1 071
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463520948038
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520947239
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=273
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246486%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:35:49
Время сессии: 01:13:31
Время отчета: 22.05.2016 00:42:09
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=189499415
Тип: HTTP запрос
Размер (байты): 1 888
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=189499415
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520947239
User input:
POST data:
video%5Furl=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
HardwareVendor=Unknown
video%5Fdesc=
video%5Fheight=
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
PlatformVersion=7
postalCode=33695
position=273
age%5Frange=
region=FL
countryName=United%20States
IP=104%2E136%2E229%2E64
BrowserName=Internet%20Explorer
regionName=Florida
PlatformName=Windows
HardwareModel=Unknown
area%5Fcode=
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
metro%5Fcode=539
partnerID=k456n785c785t
wb%5Fmarkup=0%2E01
IsMobile=False
HCPM=8%2E50
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246486%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
v=4%2E5
IsTablet=False
PlatformVendor=Microsoft
countryCode=US
sw=441
sh=260
latitude=27%2E9475
age=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
city=Tampa
page%5Fdomain=itibitiphone%2Ecom
gender=
BrowserVersion=7%2E0
BrowserVendor=Microsoft
video%5Ftitle=
longitude=%2D82%2E4584
========================================
Локальное время:17.05.2016 17:35:50
Время сессии: 01:13:32
Время отчета: 22.05.2016 00:42:10
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=189499415& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246486%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 993
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=189499415& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246486%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520947239
User input:
POST data:
id=f9af1ebe%2D161f%2D4126%2D847c%2Dab0bcbe76756
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=273
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:35:53
Время сессии: 01:13:35
Время отчета: 22.05.2016 00:42:10
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=189499415& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246486%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 002
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=189499415& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246486%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520947239
User input:
POST data:
id=f9af1ebe%2D161f%2D4126%2D847c%2Dab0bcbe76756
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=273
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2854
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:35:59
Время сессии: 01:13:41
Время отчета: 22.05.2016 00:42:10
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=189499415& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246486%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 001
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=189499415& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246486%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520947239
User input:
POST data:
id=f9af1ebe%2D161f%2D4126%2D847c%2Dab0bcbe76756
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=273
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=6491
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:35:59
Время сессии: 01:13:41
Время отчета: 22.05.2016 00:42:11
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=18 9499415&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 73&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 570
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=18 9499415&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 73&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520947239
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=10926
========================================
Локальное время:17.05.2016 17:36:32
Время сессии: 01:14:14
Время отчета: 22.05.2016 00:42:11
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=189499415&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=273&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 612
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=189499415&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=273&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463520947239
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=f9af1ebe%2D161f%2D4126%2D847c%2Dab0b cbe76756
========================================
Локальное время:17.05.2016 17:38:03
Время сессии: 01:15:45
Время отчета: 22.05.2016 00:42:12
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463521083046
Тип: HTTP запрос
Размер (байты): 1 071
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463521083046
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521082260
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=274
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246468%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:38:04
Время сессии: 01:15:46
Время отчета: 22.05.2016 00:42:12
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=496962237
Тип: HTTP запрос
Размер (байты): 1 888
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=496962237
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521082260
User input:
POST data:
video%5Furl=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
HardwareVendor=Unknown
video%5Fdesc=
video%5Fheight=
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
PlatformVersion=7
postalCode=33695
position=274
age%5Frange=
region=FL
countryName=United%20States
IP=104%2E136%2E229%2E64
BrowserName=Internet%20Explorer
regionName=Florida
PlatformName=Windows
HardwareModel=Unknown
area%5Fcode=
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
metro%5Fcode=539
partnerID=k456n785c785t
wb%5Fmarkup=0%2E01
IsMobile=False
HCPM=8%2E50
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246468%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
v=4%2E5
IsTablet=False
PlatformVendor=Microsoft
countryCode=US
sw=441
sh=260
latitude=27%2E9475
age=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
city=Tampa
page%5Fdomain=itibitiphone%2Ecom
gender=
BrowserVersion=7%2E0
BrowserVendor=Microsoft
video%5Ftitle=
longitude=%2D82%2E4584
========================================
Локальное время:17.05.2016 17:38:05
Время сессии: 01:15:47
Время отчета: 22.05.2016 00:42:12
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=819886761& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246468%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 993
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=819886761& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246468%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521082260
User input:
POST data:
id=e469c211%2Dc0f8%2D427e%2D98d8%2D2b453a77e351
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=274
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:38:08
Время сессии: 01:15:50
Время отчета: 22.05.2016 00:42:13
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=819886761& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246468%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 002
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=819886761& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246468%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521082260
User input:
POST data:
id=e469c211%2Dc0f8%2D427e%2D98d8%2D2b453a77e351
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=274
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2853
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:38:14
Время сессии: 01:15:56
Время отчета: 22.05.2016 00:42:13
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=819886761& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246468%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 001
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=819886761& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246468%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521082260
User input:
POST data:
id=e469c211%2Dc0f8%2D427e%2D98d8%2D2b453a77e351
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=274
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=6571
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:38:14
Время сессии: 01:15:56
Время отчета: 22.05.2016 00:42:14
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=81 9886761&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 74&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 570
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=81 9886761&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 74&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521082260
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=10998
========================================
Локальное время:17.05.2016 17:38:46
Время сессии: 01:16:28
Время отчета: 22.05.2016 00:42:14
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=819886761&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=274&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 612
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=819886761&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=274&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521082260
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=e469c211%2Dc0f8%2D427e%2D98d8%2D2b45 3a77e351
========================================
Локальное время:17.05.2016 17:41:13
Время сессии: 01:18:56
Время отчета: 22.05.2016 00:42:14
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463521273291
Тип: HTTP запрос
Размер (байты): 1 071
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463521273291
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521272491
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=275
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246462%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:41:14
Время сессии: 01:18:56
Время отчета: 22.05.2016 00:42:15
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=476712131
Тип: HTTP запрос
Размер (байты): 1 888
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=476712131
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521272491
User input:
POST data:
video%5Furl=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
HardwareVendor=Unknown
video%5Fdesc=
video%5Fheight=
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
PlatformVersion=7
postalCode=33695
position=275
age%5Frange=
region=FL
countryName=United%20States
IP=104%2E136%2E229%2E64
BrowserName=Internet%20Explorer
regionName=Florida
PlatformName=Windows
HardwareModel=Unknown
area%5Fcode=
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
metro%5Fcode=539
partnerID=k456n785c785t
wb%5Fmarkup=0%2E01
IsMobile=False
HCPM=8%2E50
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246462%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
v=4%2E5
IsTablet=False
PlatformVendor=Microsoft
countryCode=US
sw=441
sh=260
latitude=27%2E9475
age=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
city=Tampa
page%5Fdomain=itibitiphone%2Ecom
gender=
BrowserVersion=7%2E0
BrowserVendor=Microsoft
video%5Ftitle=
longitude=%2D82%2E4584
========================================
Локальное время:17.05.2016 17:41:15
Время сессии: 01:18:57
Время отчета: 22.05.2016 00:42:15
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=476712131& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246462%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 993
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=476712131& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246462%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521272491
User input:
POST data:
id=4720c05d%2D2cbf%2D4995%2D94ee%2D90ac08d5de18
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=275
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:41:18
Время сессии: 01:19:00
Время отчета: 22.05.2016 00:42:16
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=476712131& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246462%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 002
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=476712131& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246462%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521272491
User input:
POST data:
id=4720c05d%2D2cbf%2D4995%2D94ee%2D90ac08d5de18
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=275
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2781
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:41:25
Время сессии: 01:19:07
Время отчета: 22.05.2016 00:42:16
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=476712131& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246462%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 001
----------------------------------------
http://tracking.optimatic.com/3.5/tracking/trackAd.ashx?adID=k456n785c785t&noCache=476712131& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246462%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521272491
User input:
POST data:
id=4720c05d%2D2cbf%2D4995%2D94ee%2D90ac08d5de18
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=3
adCpm=2
position=275
country=United%20States
countryCode=US
Advertiser%5FID=yu2142016knc
haveAd=Y
campaign%5Fid=%7C
ResponseTime=7280
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
Локальное время:17.05.2016 17:41:25
Время сессии: 01:19:07
Время отчета: 22.05.2016 00:42:16
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=47 6712131&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 75&page_host=web.itibitiphone.com
Тип: HTTP запрос
Размер (байты): 570
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackAdLoadTime.ashx?adID=k456n785c785t&noCache=47 6712131&alfyzone=vpaidtag&countrycode=US®ion=FL &postalcode=33695&sw=441&sh=260&gender=&position=2 75&page_host=web.itibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521272491
User input:
POST data:
Advertiser%5FID=yu2142016knc
TimeStrAd=11707
========================================
Локальное время:17.05.2016 17:41:58
Время сессии: 01:19:40
Время отчета: 22.05.2016 00:42:17
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=476712131&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=275&page_host=web.it ibitiphone.com
Тип: HTTP запрос
Размер (байты): 612
----------------------------------------
http://tracking.optimatic.com/3.5/Tracking/trackEvent.ashx?event=complete&id=k456n785c785t&no Cache=476712131&alfyzone=vpaidtag&countrycode=US&s w=441&sh=260&gender=&position=275&page_host=web.it ibitiphone.com
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521272491
User input:
POST data:
Advertiser%5FID=yu2142016knc
campaign%5Fid=%7C
tracking%5Fid=4720c05d%2D2cbf%2D4995%2D94ee%2D90ac 08d5de18
========================================
Локальное время:17.05.2016 17:43:03
Время сессии: 01:20:45
Время отчета: 22.05.2016 00:42:17
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463521382565
Тип: HTTP запрос
Размер (байты): 1 071
----------------------------------------
http://delivery.optimatic.com/4.5/webservice/getAdList.ashx?noCache=1463521382565
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521380237
User input:
POST data:
age%5Frange=
content%5Furl=
video%5Fasset%5Furl=
partnerID=k456n785c785t
segment=
video%5Fwidth=
video%5Fdesc=
video%5Fheight=
gender=
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
position=276
video%5Fid=
page%5Ftitle=KNCTR%20Loading%2E%2E%2E
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246460%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
audience%5Fsegment=
cardname=
sw=441
custom1=
sh=260
custom2=
isOut=true
custom3=
video%5Furl=
alfyzone=vpaidtag
age=
video%5Ftitle=
========================================
Локальное время:17.05.2016 17:43:03
Время сессии: 01:20:45
Время отчета: 22.05.2016 00:42:18
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=850503982
Тип: HTTP запрос
Размер (байты): 1 888
----------------------------------------
http://rtb.optimatic.com/webservice/getRTB.ashx?1=1&bidfloor=3.79&Advertiser_ID=p834e4 22b897&RTBType=JSON&pubID=itibiti&rnd=850503982
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521380237
User input:
POST data:
video%5Furl=
content%5Furl=
video%5Fasset%5Furl=
video%5Fid=
segment=
video%5Fwidth=
HardwareVendor=Unknown
video%5Fdesc=
video%5Fheight=
alfyzone=vpaidtag
userid=69E0645A%2D6014%2DE678%2D4A11%2D0BA9080F006 5
page%5Fhost=web%2Eitibitiphone%2Ecom
PlatformVersion=7
postalCode=33695
position=276
age%5Frange=
region=FL
countryName=United%20States
IP=104%2E136%2E229%2E64
BrowserName=Internet%20Explorer
regionName=Florida
PlatformName=Windows
HardwareModel=Unknown
area%5Fcode=
CPMList=8%2E50%7C2%2E00%7C3%2E50%7C
metro%5Fcode=539
partnerID=k456n785c785t
wb%5Fmarkup=0%2E01
IsMobile=False
HCPM=8%2E50
content%5Fpage%5Furl=http%3A%2F%2Fweb%2Eitibitipho ne%2Ecom%2Fknctr%2Fkn%5Fvideo%5Fv400%2Ephp%3Fvideo %5Fid%3D246460%26channel%5Fid%3D1%26product%5Fkey% 3DITI2F672FCCA90A03ACE66E4F89617D48A6%26product%5F name%3DItibiti%5FKnctr%5FC11%26product%5Fversion%3 D2%2E0%2E1747%2E0%26
v=4%2E5
IsTablet=False
PlatformVendor=Microsoft
countryCode=US
sw=441
sh=260
latitude=27%2E9475
age=
UserAgent=Mozilla%2F4%2E0%20%28compatible%3B%20MSI E%207%2E0%3B%20Windows%20NT%206%2E1%3B%20WOW64%3B% 20Trident%2F7%2E0%3B%20SLCC2%3B%20%2ENET%20CLR%202 %2E0%2E50727%3B%20%2ENET%20CLR%203%2E5%2E30729%3B% 20%2ENET%20CLR%203%2E0%2E30729%3B%20Media%20Center %20PC%206%2E0%3B%20BRI%2F1%3B%20BRI%2F2%3B%20%2ENE T4%2E0C%3B%20%2ENET4%2E0E%3B%20GWX%3ADOWNLOADED%29
city=Tampa
page%5Fdomain=itibitiphone%2Ecom
gender=
BrowserVersion=7%2E0
BrowserVendor=Microsoft
video%5Ftitle=
longitude=%2D82%2E4584
========================================
Локальное время:17.05.2016 17:43:04
Время сессии: 01:20:46
Время отчета: 22.05.2016 00:42:18
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=850503982& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246460%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 993
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=850503982& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246460%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521380237
User input:
POST data:
id=f538cef8%2D9b83%2D40f1%2Dad55%2D6ab7c3cc2899
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=0
adCpm=0
position=276
country=United%20States
countryCode=US
Advertiser%5FID=p834e422b897
haveAd=N
campaign%5Fid=%7C
ResponseTime=0
age=
age%5Frange=
gender=
segment=
publisher%5Fid=
========================================
Локальное время:17.05.2016 17:43:07
Время сессии: 01:20:49
Время отчета: 22.05.2016 00:42:18
Процесс: C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Информация о процессе: | Itibiti_Knctr_C11 | 1.0.0.0
Источник: http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=850503982& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246460%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
Тип: HTTP запрос
Размер (байты): 1 002
----------------------------------------
http://ntracking.optimatic.com/3.5/Ntracking/trackAd.ashx?adID=k456n785c785t&noCache=850503982& publisher_id_qs=itibiti&page_host=web.itibitiphone .com&sw=441&sh=260&content_page_url=http%3a%2f%2fw eb.itibitiphone.com%2fknctr%2fkn_video_v400.php%3f video_id%3d246460%26channel_id%3d1%26product_key%3 dITI2F672FCCA90A03ACE66E4F89617D48A6%26product_nam e%3dItibiti_Knctr_C11%26product_version%3d2.0.1747 .0%26
User-Agent: -
Cookie: opt_cc=sonobi_rtb=f37089fa-35b4-5b82-a0ce-ae708dbc110a&b23d794s8w=33795124-28d3-4b14-bb53-16a343af7d29
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Screen(w:h): 800:600
Referer: http://cdn.optimatic.com/verMoat/shell.swf?noCache=1463521380237
User input:
POST data:
id=f538cef8%2D9b83%2D40f1%2Dad55%2D6ab7c3cc2899
content%5Furl=
alfyzone=vpaidtag
partnerID=k456n785c785t
Rank=2
adCpm=8%2E5
position=276
country=United%20States
countryCode=US
Advertiser%5FID=adotube
haveAd=N
campaign%5Fid=%7C
ResponseTime=2848
age=
age%5Frange=
gender=
segment=
publisher%5Fid=itibiti
========================================
05-19-2025, 07:18 AM
Linear Mode
